[FX.php List] [OFF] Spammers possibly using my online forms

Malcolm Fitzgerald malcolm at notyourhomework.net
Thu Mar 1 16:03:41 MST 2012


On 02/03/2012, at 12:20 AM, Bob Patin wrote:

> I've had a situation in the last couple of weeks where one or more spammers have been able to use my mail server to send spam through it.
> 
> I don't have relay turned on, use send-authentication, but yet somehow they were able to send a ton of spam.
> 
> Question: I have some PHP scripts that send emails at the conclusion of the transaction; for example, a user uploads a file, and an email goes out to fellow co-workers to tell them they have another file to review.
> 
> The mail-sending script that I use includes authentication for my mail server; is there still a way for spammers to "hijack" this script and use it to send spam? If so, is there a way to prevent it?

Hard to say without seeing the script.

Malcolm


More information about the FX.php_List mailing list