note 74449 added to function.ssh2-auth-password

This function is useful for authenticating website clients against local (or remote) Unix users. I'd played around with Apache+PAM, various mod_auths and homebrewed shell programs and even NIS, but to authenticate a user against a Unix shadow file fundamentally requires root priviledges, so either your PHP script needs root or an external program needs it's sticky bit set. Both of these have *serious* security implications. Using SSH, the overhead is obviously going to be greater but you're trusting a root service that's been (and continues to be) really well tested. Just try authing with SSH against localhost (or another host if you want). ---- Server IP: 69.147.83.197 Probable Submitter: 83.216.157.106 ---- Manual Page -- http://www.php.net/manual/en/function.ssh2-auth-password.php Edit -- https://master.php.net/note/edit/74449 Del: integrated -- https://master.php.net/note/delete/74449/integrated Del: useless -- https://master.php.net/note/delete/74449/useless Del: bad code -- https://master.php.net/note/delete/74449/bad+code Del: spam -- https://master.php.net/note/delete/74449/spam Del: non-english -- https://master.php.net/note/delete/74449/non-english Del: in docs -- https://master.php.net/note/delete/74449/in+docs Del: other reasons-- https://master.php.net/note/delete/74449 Reject -- https://master.php.net/note/reject/74449 Search -- https://master.php.net/manage/user-notes.php