Mail-Settings: Scripts are not allowed to use sendmail - but it's possible to send spam

[ehrenwert]

Hello,

I configured the plesk-outgoing-mail limitation as follows: Scripts are not allowed to send mails (see: http://d.pr/i/HqdO ).

But a simple php-script with mail()-command can successfully send mails.

How can I stop that?

 

[trialotto]

@ehrenwert,

In the php.ini file, you should check for the line "disabled_functions = <values>".

The appropriate php.ini file can be defined as a general config file (use the command "php --ini" to find the appropriate file) or a per-domain config file (go to the domain directory and try to search for the php.ini file).

Adding the value "mail" to the <values> list (i.e. resulting a line, similar to "disabled_functions = mail,<other values>") will block php code to use the mail() command.

In short, a simple adjustment to the php.ini file can stop mails, sent with the php mail() function.

As a final note, it is "good practice" to check all php.ini files in the domain directories, i.e. that the line disabled_functions is present and that it contains the value "mail".

Kind regards....