UBB.threads PHP Forum Software Community Forums Resources and Customizing How Do I? Remove x-php-script from outgoing messages

X-PHP-Script: themepark.nl/ubb/admin/blabla.php for 1.2.3.4

Anything I can do to not send this on out on mail send from within ubb?
I am on a shared environment so can do little in the php config department.

Why would you want this removed? Some mail servers will reject mails if they can tell it's from a php script and theres no script name/source listed

How about the fact that the ip number is listed there? I don't really care about naming the script, I care about slapping the IP adres there.

Put a watch on a user, and voila, there's the ip adres. Put a watch on the intire forum, get every users ip adres mailed to you. Plus if you reject a user, that user gets your ip adres as a bonus.

b.t.w., that line IS removed from the mails that ubbcentral sends out.

Well, it's in one of the mailer files; likely the phpmailer class in the libs directory; I don't have code in front of me right this second however to look it up

Solution: Fill in an smtp server. If you use the php mail stuff, that headerline is added.

I would say that configuring an smtp server would be the prefered way to hide the ip adresses from users, instead of putting it hidden in the advanced stuff.

Does it really matter though? I mean, they can always just dns your domain name and have your ip address...

EHr, my home ip, every users home ip.

Don't forget the watch mails are generated as soon as a user posts something, so their ip address is mentioned in the mails that are sended out.

That's odd, it should be the SERVER ip, not the individual user... no "user" should ever know another user's ip address through the forum... If that is the case, this has to be a bug...

That line is added if you use the mail function in php, and it adds the ip of the user running the script. By setting an smtp server you avoid using that function and all is well again.

It appears that your sendmail or php configuration is setup to add that. I just looked through the entire ubb directory structure, including the phpmailer class that handles all of the mail functions, and "X-PHP-Script" isn't added anywhere in the code. We do add an X-Mailer header, but nothing else.

I remember it was on our current host and our previous host. Does ubbcentral send out mails through an smtp server.

Like I said, I think it's php's mail() function that is adding it. I'll test on a few more hosts tonight.

We just use the standard php mail() here.

Could be something then in the actual configuration of php?

this is the phpinfo for this very server. My site is on the same server as this site. I don't see anything in here that would add or not add an xmailer php script header, but in truth I am not 100 percent sure what I am looking for either.

I can't remember what the -t -i flags do

I tested it on a different host, and it was not added. But like I said, our current provider and our previous provider did have this added somewhere on the line when you use the php mail function.

I googled en how to remove it, and saw the question more, but no answers.

I think quite a few hosts enable this somewhere. Could actually be a sendmail configuration. That way if there is a rogue script somewhere on the server that is generating email they can see not only where the script is located, but also the IP of the user generating the email.

So I guess the Conclusion so far is, if you have this kind of behavior at your host, setup an smtp server within ubb.threads.