I just received a rather strange mail from my host which is all concerning boonex scripts.
1. I got(probably automated) a note that I have opened a ticket, which I did not.
2. When I checked my support account I got this:
Hello,
Note: This notification is being sent to you as a result of a script
capable of sending multiple e-mails being uploaded to your account.
Just wanted to remind you to keep the script updated/secure so that it's
not used for abuse/spam. Abuse usage of such scripts is against our
service agreement, http://xxxx.com/info/aup.php (section:
Unsolicited E-Mail), and will result in account suspension without any
prior notice. This is a notification sent to every customer when a new
script is uploaded.
We request the co-operation of our customers to keep servers secure and
spam-free. Care should be taken from the account owners to keep their
scripts updated and to secure the password. We recommend to uninstall
all softwares/applications which are not in use.
Note: If this is the first time you received this mail, it contains the history for the entire month so far.
Below are the recently upload scripts that contain code to send email. You may wish to inspect them to ensure they are not sending out SPAM.
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:380: if (!$envelope || strpos(ini_get('sendmail_path'),' -f') !== false) {
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:381: return mail($address,
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:382: $this->subject,
---
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:385: } else {
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:386: return mail($address,
/home/xxxxx/public_html/xxx.com/plugins/phpids/IDS/Log/Email.php:387: $this->subject,
---
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:422: $sMailHeader = "Content-type: text/html; charset=UTF-8\r\n" . $sMailHeader;
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:423: $iSendingResult = mail( $sRecipientEmail, $sMailSubject, $sMailBody, $sMailHeader, $sMailParameters );
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:424: } else {
---
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:426: $sMailBody = html2txt($sMailBody);
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:427: $iSendingResult = mail( $sRecipientEmail, $sMailSubject, html2txt($sMailBody), $sMailHeader, $sMailParameters );
/home/xxxxx/public_html/xxx.com/inc/utils.inc.php:428: }
---
/home/xxxxx/public_html/xxx.com/inc/classes/BxDolCronCmd.php:41: {
/home/xxxxx/public_html/xxx.com/inc/classes/BxDolCronCmd.php:42: mail( $site[email], "{$site['title']}: Periodic Report", $output, "From: Periodic <$site[email]>", "-f$site[email]" );
/home/xxxxx/public_html/xxx.com/inc/classes/BxDolCronCmd.php:43: }
---
/home/xxxxx/public_html/xxx.com/tellfriend.php:163:
/home/xxxxx/public_html/xxx.com/tellfriend.php:164: return mail( $recipient, $aTemplate['Subject'], $message, $headers, $headers2 );
/home/xxxxx/public_html/xxx.com/tellfriend.php:165: }
Is there something to be concerned about or just a precocious action from my host?
