RE: [PHP] Root Commands

I have looked into this once before, and If I remember correctly, there is a way but PHP has to be compiled as CGI and not as a module. Then you would be able to use suEXEC to force it to run as a user other than what the web server is running. Try Qmail as your mail server, this has a lot of nice little programs that allows just what your looking for..Qmailadmin. Hope this helps. At 11:40 PM 2/20/2003 +1100, you wrote:

setuid is a UNIX command. try 'man setuid' on a *nix box.. LW -----Original Message----- From: Patrick Armour [mailto:php@patarmour.com] Sent: Thursday, 20 February 2003 11:36 AM To: Jason Sheets Cc: php-general@lists.php.net Subject: Re: [PHP] Root Commands Great idea. However, that opens up a whole other can of worms that I'm not really prepared to dive into yet. I searched php.net for the setuid function, but didn't find anything. Is this a php function? Do you know where any documentation on it is? Thanks again Patrick ----- Original Message ----- From: "Jason Sheets" <jsheets@php.net> To: "Patrick Armour" <php@patarmour.com> Cc: <php-general@lists.php.net> Sent: Wednesday, February 19, 2003 6:27 PM Subject: Re: [PHP] Root Commands Most ways require a program a with root access to execute (setuid root) this is very insecure. I would look at enabling your email program to get the account information from a database like mysql or postgres, that way you need just insert a record into the database. Jason On Wed, 2003-02-19 at 16:37, Patrick Armour wrote:

I am trying to use a form (password protected of course) that will allow

an administrator to add POP accounts to a linux box. The problem that I seem to have is that the form is trying to give the commands as user 'nobody' and they need to be given by either root or a superuser.

Is there any way to accomplish this? If somebody were to point me in

the direction of a tutorial on this subject I would really appreciate it.

Sincerely, Patrick Armour www.greatplainsinternet.com

-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php