|
|
Sponsored Content
Operating Systems
Linux
Run PHP script when new email received
Post 302462572 by Neo on Thursday 14th of October 2010 01:27:58 PM
10-14-2010
Administrator
I design based on risk, and I have been in infosec all my very long career.
This is nothing wrong with having a .forward file in the situation posted by the original poster, IMHO.
There is no risks identified, there are no vulnerabilities identified, there are no threats identified.
I have been in infosec all my very long UNIX and Linux career, and have a CISSP, yadda, yadda, yadda... Security is based on risk, not speculation.
One of my biggest "pet peeves" are people who make blanket "this is not good" statements in the absence of any risk analysis. This is the biggest mistake many technical people make in IT security.
If you are going to make "sweeping statements" about "this is good" and "this is not good" here, you need to be prepared to completely back it up, technically, since I run the forums, LOL... You are not going to "beat me into submission, I assure you"
There is no technical argument (that you have made) where in a low risk situation on a shared server with an unprivileged user that a .forward file is such a high risk.
If you are willing to stop "hand waving" and provide technical facts on what the vulnerability, threat and risk of this original posters application, I'm all ears
Otherwise, move on. Thanks.
---------- Post updated at 17:27 ---------- Previous update was at 17:24 ----------
Note:
I did a Google search on these terms:
...and after looking at around 8 pages, found nothing interesting.
This is nothing wrong with having a .forward file in the situation posted by the original poster, IMHO.
There is no risks identified, there are no vulnerabilities identified, there are no threats identified.
I have been in infosec all my very long UNIX and Linux career, and have a CISSP, yadda, yadda, yadda... Security is based on risk, not speculation.
One of my biggest "pet peeves" are people who make blanket "this is not good" statements in the absence of any risk analysis. This is the biggest mistake many technical people make in IT security.
If you are going to make "sweeping statements" about "this is good" and "this is not good" here, you need to be prepared to completely back it up, technically, since I run the forums, LOL... You are not going to "beat me into submission, I assure you"
There is no technical argument (that you have made) where in a low risk situation on a shared server with an unprivileged user that a .forward file is such a high risk.
If you are willing to stop "hand waving" and provide technical facts on what the vulnerability, threat and risk of this original posters application, I'm all ears
Otherwise, move on. Thanks.
---------- Post updated at 17:27 ---------- Previous update was at 17:24 ----------
Note:
I did a Google search on these terms:
Quote:
".forward" security risk
|
|
10 More Discussions You Might Find Interesting
1. Forum Support Area for Unregistered Users & Account Problems
hi I did not received any such email for account activation nor i am able to see any status in my profile.
Am i missing anything?? :confused:
Please help
Appreciated. (0 Replies)
Discussion started by: bhush782003
0 Replies
2. UNIX for Advanced & Expert Users
Hi,
I tried running mailx command like this:
sadm@bioinfo-z:~$ mailx foobar@gmail.com
Subject: testgmail
Some content.
.
EOT
As you can see although it is successfuly executed.
But still I can't receive email at my foobar@gmail.com
account.
What is the cause? (9 Replies)
Discussion started by: monkfan
9 Replies
3. UNIX for Dummies Questions & Answers
hi
I have a bit of a problem i need help with.
I have a script that runs no problems when i run it manually. as soon as i stick in
tester: /app/scripts/run.pl
into /etc/aliases & try to run it by sending a mail it doesnt work.
the output files are owned by daemon, which i dont like & think... (7 Replies)
Discussion started by: jojo77
7 Replies
4. Forum Support Area for Unregistered Users & Account Problems
I have tried to register and got a message saying an email would be sent but no email has turned up. Could you try again please? (1 Reply)
Discussion started by: lookingfor help
1 Replies
5. UNIX for Advanced & Expert Users
hi..
I have the porblem where the email was sent but not received by users.. The message as below:-
Dec 16 11:42:04 isp postfix/smtp: A80042B4B: to=<user_name@example.com.my>,
relay=smtp.example.com.my:25, delay=890, delays=0.17/0.02/31/859, dsn=2.0.0,
status=sent (250 2.0.0 Ok: queued... (1 Reply)
Discussion started by: bh_hensem
1 Replies
6. Shell Programming and Scripting
Hi expert
I wish to start a shell script when I receive an email.
I modified the aliases file and I add this string
as400nag: "|/home/nag-script/startstop/AS400-Boot.sh
The solution works .
When the as400nag user receive an email the
/home/nag-script/startstop/AS400-Boot.sh starts .but... (3 Replies)
Discussion started by: emi65
3 Replies
7. Forum Support Area for Unregistered Users & Account Problems
I have tried to register today with the username BatterBits, but have not received the activation email
I do not live in any of the restricted countries - unless the UK has suddenly become a threat!
I'd be grateful if you would assist.
many thanks
Ian (2 Replies)
Discussion started by: unregistered
2 Replies
8. Shell Programming and Scripting
Hello Guys,
Here is the requirement!!
I want to check the mail with attachment received or not through unix scripting.
And send an notification email when mail with attachment already received.
Any thoughts on this is much appreciated!!
Regards,
Harry (0 Replies)
Discussion started by: dharry2017
0 Replies
9. Shell Programming and Scripting
Hi Guys,
I am stuck in between and seeking help here.
Requirement: A script that will run every morning which will connect to Mysql database and run the query to inform us about the holidays (it will also check if there were any holidays during last 2 business days). So the three queries are... (11 Replies)
Discussion started by: Sambit Sahu
11 Replies
10. Shell Programming and Scripting
Linux System having all Perl, Python, PHP (and Ruby) installed
From a Shell script, can call a Perl, Python, PHP (or Ruby ?) file
eg
eg
a Shell script run in a case statement call to run a php file, also Perl or/and Python file???
Like
#!/usr/bin/bash
....
....
case $INPUT_STRING... (1 Reply)
Discussion started by: hoyanet
1 Replies
LEARN ABOUT LINUX
php-config
php-config(1) Scripting Language php-config(1) NAME
php-config - get information about PHP configuration and compile options SYNOPSIS
php-config [options] DESCRIPTION
php-config is a simple shell script for obtaining information about installed PHP configuration. OPTIONS
--prefix Directory prefix where PHP is installed, e.g. /usr/local --includes List of -I options with all include files --ldflags LD Flags which PHP was compiled with --libs Extra libraries which PHP was compiled with --man-dir The directory prefix where the manpages is installed --extension-dir Directory where extensions are searched by default --include-dir Directory prefix where header files are installed by default --php-binary Full path to php CLI or CGI binary --php-sapis Show all SAPI modules installed on the Debian system --configure-options Configure options to recreate configuration of current PHP installation --version PHP version --vernum PHP version as integer SEE ALSO
php(1) VERSION INFORMATION
This manpage describes php, version 7.0.33-6+ubuntu18.04.1+deb.sury.org+3. COPYRIGHT
Copyright (C) 1997-2017 The PHP Group This source file is subject to version 3.01 of the PHP license, that is bundled with this package in the file LICENSE, and is available through the world-wide-web at the following url: http://www.php.net/license/3_01.txt If you did not receive a copy of the PHP license and are unable to obtain it through the world-wide-web, please send a note to license@php.net so we can mail you a copy immediately. The PHP Group 2017 php-config(1)