error_log appears to be echoing smtp tansactions

[keat]

I just found a huge error_Log file in the public_html folder.

The log file was too large to open, so I had to delete it and wait for it to repopulate.

A large number of errors are down to a plugin, for which I've raised a support ticket.

 

However, there also appears to be smtp transactions being echoed in there.

For obvious reasons I'll not post the whole lot, but they start along the lines:

 

 

[09-Nov-2016 12:13:26 Europe/London] CLIENT -> SMTP: EHLO www.xxxx.co.uk

[09-Nov-2016 12:13:26 Europe/London] SMTP -> FROM SERVER:250-xxx.myservers.co.uk Hello xxx.myservers.co.uk [111.222.333.444]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250 HELP

[09-Nov-2016 12:13:26 Europe/London] CLIENT -> SMTP: AUTH LOGIN

[09-Nov-2016 12:13:26 Europe/London] SMTP -> FROM SERVER:334 VXNlcm5hbWU6

[09-Nov-2016 12:13:26 Europe/London] CLIENT -> SMTP: d2Vib3JkZXJAYmVhbC5vcmcudWs=

[09-Nov-2016 12:13:26 Europe/London] SMTP -> FROM SERVER:334 UGFzc3dvcmQ6

[09-Nov-2016 12:13:26 Europe/London] CLIENT -> SMTP: dDdRKFN2RjA2VG9B

[09-Nov-2016 12:13:26 Europe/London] SMTP -> FROM SERVER:235 Authentication succeeded

 

 

 

and continue with the customers name, address, what he added to his cart etc etc etc.

 

Is there any reason why this is being echoed in an error log, and is it possible to turn this off.

 

 

[bsmither]

The latest version has added having emails logged to the database. The time to delete is settable in the admin.

Do you have the ini-custom.inc.php file present?

Even so,, there shouldn't be these things in the error_log.

[keat]

I'm still on V6.10

I'm not aware of ini-custom.inc.php,

[keat]

If it helps identify what smtp info it's posting, I've included a little more.

 

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP: Mandy Simmons (Company  LTD) just placed order number 161109-153753-6786 on Nov 09 2016, 15:37 PM.

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         This order can be managed online by following the link below.

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         https://www.xxx.co.uk.uk/admin.php?_g=orders&action=edit&order_id=161109-153753-6786

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         ----------------------------------------------------------------------

[09-Nov-2016 15:37:54 Europe/London] CLIENT -> SMTP:         Billing address:

 

I assume it's the information for our staff end ?

 

[bsmither]

That's the Admin: Order Received email. The log may contain any and all other emails sent out.

Did we, perhaps, work on trying to solve an issue, and in so doing, made edits to the file order.class.php, mailer.class.php, or class.phpmailer.php?

Using FTP or the File Explorer provided as a tool in your site's hosting account control panel, scan through the /classes/ folder looking for odd file timestamps.

[Dirty Butter]

I don't have ANY email log entries in my error log.

[bsmither]

"The log may contain any and all other emails sent out."

I am referring to the new Email Log. You will find the link in the "Reporting" nav section.

[keat]

 

php.mailer.class and mailer.class.php have the same time stamp as all the other files.

Order.class.php was modified in September. Where ever possible I like to rename the original and put a comment as to why it was replaced.

In this instance the original file is called 'order.class.php-before fix for over write order thing', so i'm guessing it's related to the customers over writing orders.

I reinstated the original file, but it's still happening.

I have discovered another error which happened just before the smtp echo.

Could this be related.

 

[10-Nov-2016 09:26:59 Europe/London] PHP Warning:  Shipping not setup or allow no shipping not enabled in /home/xxxxx/public_html/classes/cubecart.class.php on line 1723

[10-Nov-2016 09:27:39 Europe/London] SMTP -> FROM SERVER:220-xxxxxx.co.uk ESMTP Exim 4.87 #1 Thu, 10 Nov 2016 09:27:39 +0000

although I'm guessing the no shipping thing could be because the customer didn't choose a shipping method  ??

[keat]

This seems to appear the moment I press the secure checkout button.

[bsmither]

I think the "Shipping not setup" entry is because there were no shipping modules enabled at that time, or there weren't any enabled modules that returned a workable quote.

I will look again at the new (to CC611) email logging code to see if that may be the cause.

[keat]

I'm still on 6.10

[bsmither]

Hm.

CC610 and earlier instantiates the Mailer class once, and continues to use it during the entirety of the PHP script session (that is, per page load).

If a short piece of code was added somewhere:

$mailer->SMTPDebug = 2;
$mailer->Debugoutput = "error_log";

this will trigger the Mailer class to always log the email conversation.

We just need to find the PHP script that has had these statements added.

[keat]

I'll start a string scan over night.

[bsmither]

Look for just SMTPDebug as the name of the variable holding the instantiated Mailer class may not necessarily be $mailer.

[keat]

I found reference to SMTPDebug in a number of files, however, I found something slightly odd with mailer.class.php, which I missed earlier.

The majority of the class files have a time stamp of 05/03/2016 09:33:07

mailer.class.php has a time stamp of 05/03/16 14:49:33

I compared mine, with a fresh download of the one from 6.10 and found this at line 37.

    $this->SMTPDebug = 2; $this->Debugoutput = "error_log";

 

Maybe something I may have had issues with previously and neglected to remove it. ??

[bsmither]

That would be my conclusion.