Re: adduser?

From: Date: Sun, 20 Apr 2003 22:39:55 +0000
Subject: Re: adduser?
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-144578@lists.php.net to get a copy of this message
Yeah. Definitely not something I'd do with PHP... A better approach may be a SETUID Perl (CGI) IMHO. And there are a few of them which is quite good out there... -- me ----- Original Message ----- From: "Jason Sheets" <jsheets@shadonet.com> To: "- Edwin" <copperwa11s@yahoo.co.jp> Cc: "Alexandru Coseru" <alexcos@home.ro>; "Keith Hamilton" <php-general@mofukka.com>; <php-general@lists.php.net> Sent: Monday, April 21, 2003 12:42 AM Subject: Re: [PHP] adduser? > The problem is in standard Unix/Linux environments only root can add > users to the system so a utility would run as root, any security flaws > in your PHP script, PHP, your web server or the utility itself would > open you up to a user with root access to the machine. > > Jason > > - Edwin wrote: > > > Alexandru Coseru wrote: > > > >> Possible ..... > >> But your server SECURITY will be ZERO !!!!!! > >> So , I don't recommended it.. > > > > > > "ZERO"? Hmm... maybe not, since you can perhaps make a system like > > that of Webmin... ;) > > > > - E > > > > __________________________________________________ > > Do You Yahoo!? > > Yahoo! BB is Broadband by Yahoo! http://bb.yahoo.co.jp/ > > > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php >

« previous php.general (#144578) next »