RE: [PHP] Root Commands
| From: | Luke Woollard | Date: | Thu, 20 Feb 2003 12:40:49 +0000 |
| Subject: | RE: [PHP] Root Commands | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-136285@lists.php.net to get a copy of this message | ||
setuid is a UNIX command.
try 'man setuid' on a *nix box..
LW
-----Original Message-----
From: Patrick Armour [mailto:php@patarmour.com]
Sent: Thursday, 20 February 2003 11:36 AM
To: Jason Sheets
Cc: php-general@lists.php.net
Subject: Re: [PHP] Root Commands
Great idea. However, that opens up a whole other can of worms that I'm not
really prepared to dive into yet.
I searched php.net for the setuid function, but didn't find anything. Is
this a php function? Do you know where any documentation on it is?
Thanks again
Patrick
----- Original Message -----
From: "Jason Sheets" <jsheets@php.net>
To: "Patrick Armour" <php@patarmour.com>
Cc: <php-general@lists.php.net>
Sent: Wednesday, February 19, 2003 6:27 PM
Subject: Re: [PHP] Root Commands
> Most ways require a program
> a with root access to execute (setuid root) this is very insecure.
>
> I would look at enabling your email program to get the account
> information from a database like mysql or postgres, that way you need
> just insert a record into the database.
>
> Jason
> On Wed, 2003-02-19 at 16:37, Patrick Armour wrote:
> > I am trying to use a form (password protected of course) that will allow
an administrator to add POP accounts to a linux box. The problem that I
seem to have is that the form is trying to give the commands as user
'nobody' and they need to be given by either root or a superuser.
> >
> > Is there any way to accomplish this? If somebody were to point me in
the direction of a tutorial on this subject I would really appreciate it.
> >
> > Sincerely,
> > Patrick Armour
> > www.greatplainsinternet.com
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php