sending mail without the mail() function?

Discussion in 'PHP' started by bingobug, Feb 26, 2010.

  1. #1
    Hi, I'm looking for some help. I manage a small web server which is used for some student's personal pages as well as school projects. Recently a couple of the students have started up a bit of a spamming project using apache & php, which they promptly deleted. The server already blocks the mail() as well as several others (specifically phpmailer,mail,dl,exec,passthru,shell_exec,system,pcntl_exec) but they have still been able to use php to send mail. The mail did not seem to go through our email server, exim, because it didn't show in the logs, however it did get out. I'm wondering if anyone can help me with some information on alternate methods these students may have used to send mail using php without the above functions, so that I can hopefully block this from happening in the future. I'm not a php expert, and have only done very basic work with it. Note: the server itself does also function as a mail server, so I don't believe a solution using a firewall to block ports or something like that will work. Thanks very much.
     
    bingobug, Feb 26, 2010 IP
  2. n3r0x

    n3r0x Well-Known Member

    Messages:
    257
    Likes Received:
    4
    Best Answers:
    1
    Trophy Points:
    120
    #2
    They could use php-sockets connecting to a SMTP server and that way spam email...
     
    n3r0x, Feb 26, 2010 IP