« Using PHP to FTP - and import a CSV file into a database
Javascript: Removing new lines (”\n” or “\r”) from text »

Don’t Be a Spammer!

Last weekend, I had to deal with almost 4,000 bounce messages that were sent “from” my domain. I blamed it on someone using my domain for the reply to address, but now I wonder if it wasn’t a new version of spamming through MT. “Mail This Entry” used for spam - “If you are using Movable Type’s “Mail This Entry” feature on your blog, you are advised to rename your mt-send-entry.cgi file, or remove the feature entirely. If you are not using the feature on your blog, you still need to either rename the script, disable it by changing the permissions, or remove it from your server altogether.” Read all about it at Girlie Matters.

This entry was posted on Tuesday, November 25th, 2003 at 9:05 pm and is filed under MT hacks. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

11 Responses to “Don’t Be a Spammer!”

  1. Jennifer Says:
    November 25th, 2003 at 9:08 pm

    Ahh.. you beat me to it. I removed the feature off scripty the other day and was getting around to making a post about it. LOL! Thanks for posting this :D

  2. Big Pink Cookie Says:
    November 25th, 2003 at 9:13 pm Getting Scripty!
    I wish I had the time to implement all of the things I want to do on this blog, but…

  3. James Says:
    November 26th, 2003 at 9:49 am

    Thanks for the heads-up!

  4. jenett.radio Says:
    November 26th, 2003 at 10:21 am Spammers exploiting MT vulnerability
    I first saw it mentioned at scriptygoddess, then at Zope Newbies (via

  5. code: theWebSocket; Says:
    November 26th, 2003 at 11:35 am Spammers exploiting MT vulnerability
    Joe pushed this to the top of my pile: I first saw it mentioned at scriptygoddess, then at Zope Newbies (via blogdex). Seems spammers have found a way to exploit “mt-send-entry.cgi” to send spam from an MT user’s server. Since…

  6. lingosphere daily Says:
    November 26th, 2003 at 1:57 pm Dammit, More MT Issues
    Thanks to jenett for posting about a way that spammers can send via your server by using the “mt-send-entry.cgi” file. I haven’t had this happen yet, but it looks like folks at Zope Newbies and Scriptygoddess have… Gotta make sure…

  7. demonsurfer Says:
    November 27th, 2003 at 5:15 pm

    new mt-send-entry.cgi file released by MT:

    http://www.movabletype.org/news/2003_11.shtml#000873

  8. Goodrawk Says:
    November 30th, 2003 at 3:51 pm

    I have a question: is there a way I can use MovableType without needing to buy a .com? And, if I can, im CLUELESS on how to set it up, could someone help me?

    Ty,

    Goodrawk

  9. demonsurfer Says:
    December 15th, 2003 at 10:28 pm

    Yep, they can set one up for you for a small fee. Also the same people have developed a new blog hosting package at http://www.typepad.com/ that’s worth a look.

  10. Ed's Blog Says:
    December 22nd, 2003 at 10:05 am Upgrade MT!
    Upgrade MT!…

  11. solipsist Says:
    May 2nd, 2004 at 10:08 pm Upgraded
    While I’m in here doing maintenance and rebuildling every 12 seconds, I figured I’d upgrade to MT 2.661. Sweet! I don’t think I broke anything. *looks around* Yup. Still the same, so far. Oh - any MT folks noticing a…