Many emails are sent from PHP scripts on the server

[PremF]

There are a lot emails are sent from PHP scripts from my server.
I really need to find what domain the script is running on.

I have found this knowledge base, but it is for Qmail.
http://kb.odin.com/en/1711

As my server is using Plesk 9.3 with Postfix, not Qmail,
anyone please suggest how can I adapt that resolution to Postfix?
Or how should I do to find the script?

Thank you.

 

[IgorG]

But you can switch to Qmail, apply this solution and switch to Postfix back.

 

[kanada]

You can always patch your php with header patch.
On every message you will see script that send this message then.

Regards,
Alex

 

[atomicturtle]

We have backported the mail header and logging patch into PHP 5.2.12 from the atomic repo. This will either log which application is using the mail() function, or it will inject a header into each message sent indicating the application that was used to send the message. It can be controlled via ini settings, and implemented globally or on a per-domain basis. More info on how to upgrade is available here:

http://www.atomicorp.com/wiki/index.php/PHP

 

[PremF]

But you can switch to Qmail, apply this solution and switch to Postfix back.

How to do that?

 

[IgorG]

How to do that?

Just run /usr/local/psa/admin/bin/autoinstaller and go to menu there.