Req #38931 [Opn->Csd]: interacting with user account

Edit report at https://bugs.php.net/bug.php?id=38931&edit=1 ID: 38931 Updated by: cmb@php.net Reported by: anfsm at uaa dot alaska dot edu Summary: interacting with user account -Status: Open +Status: Closed Type: Feature/Change Request -Package: Feature/Change Request +Package: *General Issues Operating System: windows (2003 SP1) PHP Version: 5.1.6 -Assigned To: +Assigned To: cmb Block user comment: N Private report: N New Comment: > be able to change local system passwords by web interface > without relying on external utilities. That appears to be an extremly uncommon use-case for PHP scripts. Thus, I'm closing this ticket. Previous Comments: ------------------------------------------------------------------------ [2007-12-31 22:59:18] michael at chunkycow dot com dot au G'day This would be insane for security, exec is bad enough to try and shelter from the evil outside army of skript kiddies and friends. ------------------------------------------------------------------------ [2006-09-23 01:31:22] anfsm at uaa dot alaska dot edu Description: ------------ i would like the feature to modify user non-domain, windows accounts directly without having to resort to an exec(); or shell_exec(); command (probably because i cannot get them to work anyway). a standard old password, new password, confirm password setup would be ideal. i have tried exec() and shell_exec with sysinternals psexec.exe and windows' built-in runas.exe with net user commands. i have tried setting safe_mode off but i cannot get it to work. see below for sample Reproduce code: --------------- $pp = popen("runas /noprofile /user:machine_name\\administrator \"net user $username $newpassword\"", 'w'); fwrite($pp, $adminpassword); // and also tried shell_exec("echo $adminpass | runas /noprofile /user:machine_name\\administrator \"net user $username $newpassword\""); // as well as for the sysinternals psexec.exe shell_exec("psexec -u administrator -p $adminpass net user $username $newpassword"); Expected result: ---------------- be able to change local system passwords by web interface without relying on external utilities. Actual result: -------------- not possible ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=38931&edit=1