ziation

Two problems existed here:

1. The wordpress devs have hard coded the default admin email account to be ‘[email protected]’ in two separate locations in pluggable.php. This seems to have been known except by me.

2. The second (and worse issue IMO) is that the phpmailer app was choosing to use the standard php mail() function instead of the smtp or other options and this function uses the user name of the web server process and the server’s host name as the domain name for the senders email address so you will get something like [email protected].

To fix both these I simply changed the hard coded default email address to what I wanted in pluggable.php and also changed the ‘sendmail_path’ php.ini attribute to include the ‘-f user@domain’ option to force the sender email I wanted to use. This solution of course does not scale because all php apps I run in any web site on my server will now be send email from this email address (not good).

I can’t believe this is the defacto standard for sending email using php web apps.

Open source has nothing to do with secure software. Anyone who suggests it does has no clue what they are talking about. Security through obscurity is not an approved method and should never be relied upon. Look at Windows and Internet Explorer, they are closed source and are the most hacked pieces of software around.

You should leave your host for ignorance alone.

This does not work in 2.7.1.

Recently Popular

Fatal error: Call to undefined function get_recently_popular() in /path/to/site/htdocs/wp-content/plugins/recently-popular/recently_popular_widget.php on line 94