Re: adduser?
| From: | Chris Knipe | Date: | Sun, 20 Apr 2003 22:39:55 +0000 |
| Subject: | Re: adduser? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-144578@lists.php.net to get a copy of this message | ||
Yeah.
Definitely not something I'd do with PHP... A better approach may be a
SETUID Perl (CGI) IMHO. And there are a few of them which is quite good out
there...
--
me
----- Original Message -----
From: "Jason Sheets" <jsheets@shadonet.com>
To: "- Edwin" <copperwa11s@yahoo.co.jp>
Cc: "Alexandru Coseru" <alexcos@home.ro>; "Keith Hamilton"
<php-general@mofukka.com>; <php-general@lists.php.net>
Sent: Monday, April 21, 2003 12:42 AM
Subject: Re: [PHP] adduser?
> The problem is in standard Unix/Linux environments only root can add
> users to the system so a utility would run as root, any security flaws
> in your PHP script, PHP, your web server or the utility itself would
> open you up to a user with root access to the machine.
>
> Jason
>
> - Edwin wrote:
>
> > Alexandru Coseru wrote:
> >
> >> Possible .....
> >> But your server SECURITY will be ZERO !!!!!!
> >> So , I don't recommended it..
> >
> >
> > "ZERO"? Hmm... maybe not, since you can perhaps make a system like
> > that of Webmin... ;)
> >
> > - E
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! BB is Broadband by Yahoo! http://bb.yahoo.co.jp/
> >
> >
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>