[tamarian]

Originally Posted by merk

PHP has a "safe mode" system called open_basedir, it restricts PHP from going areas it isnt allowed to go into. It is controlled via php.ini, httpd.conf or .htaccess.

I do my modifications for each virtual site on my system in httpd.conf (using php_admin_value so that it cant be overridden by .htaccess).

Something like the following will allow PHP scripts to access /www/sitename, /tmp and /var/spool/mail (and outside of these paths will result in an error):

<Directory /www/sitename>
php_admin_value open_basedir "/www/sitename:/tmp:/var/spool/mail/"
</Directory>

Now, you'd have to be careful, and probably put subscriber_notify in its own directory.

Oh, and this wont help you if you're in a chroot enviroment

Good tip, Tim. Let's see if any of our CPanel+Exim users can test it. Should be fine security-wise since the spool has it's own directory:

/home/example/mail/example.com/subscription_bounces/inbox