I think i has found a site posible hacked
core developers remove url and it is not my site.
([redacted])

Warning: mail(/var/log/php-mail.log): failed to open stream: Permission denied in DefaultMailSystem->mail() (line 76 of /???YOU CAN NOT KNOW IT???/modules/system/system.mail.inc).

Comments

Qhtml created an issue. See original summary.

cilefen’s picture

Version: 8.0.x-dev » 7.x-dev
Component: lock system » mail system
Assigned: Qhtml » Unassigned
Status: Active » Postponed (maintainer needs more info)
Issue tags: -Security improvements, -Needs security review
Parent issue: #2720953: Security issue: Information disclosure »

Hello,

On the first point, it is not clear what you are asking to have done with a site you have found that you feel is hacked.

On the second point, system.mail.inc is not a file in Drupal 8. You have evidently got mail.log set in php.ini and the configured log file is unwritable by the web server user.

Qhtml’s picture

Version: 7.x-dev » 8.0.x-dev
Component: mail system » lock system
Assigned: Unassigned » Qhtml
Status: Postponed (maintainer needs more info) » Active

and if i see ....groep.be/sites/default/files/.... so i think its not maybe not drupal. And you now it ...
so i like a reaction from the (ex) core dev... ( bytheway ,i has now my own framework so i am just developer and the info that the framework let see is unacceptable, to mutch info).
... you not delete the url so you not core developer

catch’s picture

Version: 8.0.x-dev » 7.x-dev
Category: Bug report » Support request
Issue summary: View changes

@cilifen is right about the error - you need to check your logging settings. Additionally, you should go to admin -> configuration -> development -> logging and errors and select only logging for errors so they don't show on the page.

This isn't a sign of your site being hacked, it's a sign of mis-configuration. Moving to a support request.

stefan.r’s picture

Priority: Critical » Normal