[docvader]

I reinstalled this hack, thinking that my allowing unregistered users to view the HelpDesk (support) area triggered the spam.

I hate to beat a dead horse about this, but after re-uploading the script files, my server host sent me an email which states the following:

Below are the recently upload scripts that contain code to send email. You may wish to inspect them to ensure they are not sending out SPAM.

/home/xxxxxxxxxxxxx/public_html/forum/support.php:669: $message .= "</p><p>".$vbulletin->options["microsupport_email_footer"]."</p>";
/home/xxxxxxxxxxxxx/public_html/forum/support.php:670: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:671: // Notify Technician
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:682: {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:683: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:684: }
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:685: } else {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:686: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:687: }
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:688: } else {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:689: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:690: }
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1039: $message .= "<p>".$vbulletin->options["microsupport_email_footer"]."</p>";
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1040: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1041: } else {
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1066: {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1067: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1068: }
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1069: } else {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1070: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1071: }
---
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1072: } else {
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1073: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/support.php:1074: }
---
/home/xxxxxxxxxxxxx/public_html/forum/includes/cron/microsupport_autoclose.php:43: $message .= "</p><p>".$vbulletin->options["microsupport_email_footer"]."</p>";
/home/xxxxxxxxxxxxx/public_html/forum/includes/cron/microsupport_autoclose.php:44: mail($toemail, $subject, $message, $headers);
/home/xxxxxxxxxxxxx/public_html/forum/includes/cron/microsupport_autoclose.php:45: }
---

Anybody care to comment about the security of this? It's a great hack, one which I find very useful, but having my site send out spam to the world is not exactly one of my goals in life.