Re: Re: running SSH through a PHP script

it's running as the apache user.. I negated the need for a ~/.ssh/ directory by specifying the path to a private key and by putting entries for the hosts in /etc/ssh/ssh_authorized_keys. It stopped complaining after I did that. Chaining commands together doesn't work for me because I'm going to different hosts, unfortunately. Also, the key exchange isn't taken a long time at all, I watch the process in TOP appear, do it's thing, and dissappear. It's something with PHP waiting extraordinary amounts of time between the SSH process. Why would it be waiting if it is clear the process has been executed? Thanks for the tip on the user input, I'll definately do that once this get's into production. James James S. Martin, RHCE Contractor Administrative Office of the United States Courts Washington, DC (202) 502-2394 Paul Chvostek <paul+php@it.ca> 07/18/2003 11:45 AM Please respond to php-general To: James_Martin@ao.uscourts.gov cc: php-general@lists.php.net Subject: [PHP] Re: running SSH through a PHP script On Fri, Jul 18, 2003 at 11:29:50AM -0400, James_Martin@ao.uscourts.gov wrote: > There is no delay in the SSH commands when run from a shell, only > through the web page. Any ideas? What user is running the ssh commands? Does that user have a home directory to which it has write permissions in order to create a ~/.ssh/ directory in which to store host keys? The ssh key negotiation will always take a certain amount of time. If all three ssh commands are to the same remote host, you should consider stringing them together on a single command line, so that you only have to run ssh once. $result = `/usr/bin/ssh user@hostname "cd /some/path/ && ./do_something && ./do_something_else"` Note: this is one of those cases where you should be ULTRA careful about user input. If your ssh command includes any variables that have been posted in a form, do extensive format checks on them. Usernames should always match ^[a-z0-9]+$ . Nothing being used in the ssh command should be allowed to have [;&|] in it. Be so anal and paranoid that you risk compromising functionality, and you're less likely to screw yourself. -- Paul Chvostek <paul@it.ca> it.canada http://www.it.ca/ Free PHP web hosting! http://www.it.ca/web/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php