How to Find PHP -nobody- spammers

How to Find PHP -nobody- spammers

It has been always problem in shared hosting servers that customers sending out large spam mails. Your server's loads go higher and higher, customers begin moarning.. Now it's easy to find out the PHP nobody spammers in cPanel based servers. Following script is not developed by me but I am using it actively on our shared web hosting servers. It's highly recommended for hosters..


Please follow the guide correctly.
- mv /usr/sbin/sendmail /usr/sbin/sendmail.real
- pico /usr/bin/sendmail (into this file, paste the code below)
- chmod +x /usr/bin/sendmail
- chmod 777 /var/log/formail
- echo > /var/log/formmail

#!/usr/local/bin/perl

# use strict;
use Env;
my $date = `date`;
chomp $date;
open (INFO, ">>/var/log/formmail.log") || die "Failed to open file ::$!";
my $uid = $>;
my @info = getpwuid($uid);
if($REMOTE_ADDR) {
print INFO "$date - $REMOTE_ADDR ran $SCRIPT_NAME at $SERVER_NAME \n";
}
else {

print INFO "$date - $PWD - @info\n";

}
my $mailprog = '/usr/sbin/sendmail.real';
foreach (@ARGV) {
$arg="$arg" . " $_";
}

open (MAIL,"|$mailprog $arg") || die "cannot open $mailprog: $!\n";
while ( ) {
print MAIL;
}
close (INFO);
close (MAIL);

#finishes

Thanks to Matt for tweaks.