[FX.php List] [OFF] Spammers possibly using my online forms

[Bob Patin]

I've had a situation in the last couple of weeks where one or more spammers have been able to use my mail server to send spam through it.

I don't have relay turned on, use send-authentication, but yet somehow they were able to send a ton of spam.

Question: I have some PHP scripts that send emails at the conclusion of the transaction; for example, a user uploads a file, and an email goes out to fellow co-workers to tell them they have another file to review.

The mail-sending script that I use includes authentication for my mail server; is there still a way for spammers to "hijack" this script and use it to send spam? If so, is there a way to prevent it?

Yesterday morning I was told that over 23,000 spam messages went thru my mail server; we locked it down, changed all the mail users' passwords, but it ws a huge pain, to say the least.

Thanks for any insights,

Bob Patin
Longterm Solutions LLC
bob at longtermsolutions.com
615-333-6858
http://www.longtermsolutions.com
FileMaker 9, 10 & 11 Certified Developer
Member of FileMaker Business Alliance and FileMaker TechNet
--
Twitter: bobpatin
Google+: http://www.longtermsolutions.com/plus
AIM: longterm1954
iChat: bobpatin
--
Expert FileMaker Consulting 
FileMaker Hosting for all versions of FileMaker