[triangle-zpug] zp hacked by spambot
Chris Calloway
cbc at unc.edu
Fri Mar 30 15:57:41 CEST 2007
Dimauro, Frank wrote:
> Can anyone suggest a fix that will prevent future hijack?
Is this script meant to be invoked by anonymous? It looks like
zm_sendMail is the culprit rather than this script. Check the
permissions on it. If it truly is meant to be invoked by anonymous
visitors, then that zm_sendMail need so be responsible for validating
the mail headers.
Also, it looks like we need a paste site or use http://paste.plone.org/
--
Sincerely,
Chris Calloway
http://www.seacoos.org
office: 332 Chapman Hall phone: (919) 962-4323
mail: Campus Box #3300, UNC-CH, Chapel Hill, NC 27599
More information about the TriZPUG
mailing list