By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
443,836 Members | 2,097 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 443,836 IT Pros & Developers. It's quick & easy.

management scrips

P: n/a
Hi,

I'm writting some scripts to management users on server
throuh www. I need to call some functions like "adduser",
"rmuser" etc. in my scripts. I'd like to know the best way
I could do this. I want secure sripts. Could anyone help me
to find solution to do this ?

best regards,
--
Shamrock

Ps. Sorry for my terrible english .
Jul 17 '05 #1
Share this Question
Share on Google+
6 Replies


P: n/a
Shamrock wrote:

Hi,

I'm writting some scripts to management users on server
throuh www. I need to call some functions like "adduser",
"rmuser" etc. in my scripts. I'd like to know the best way
I could do this. I want secure sripts. Could anyone help me
to find solution to do this ?

best regards,
--
Shamrock

Ps. Sorry for my terrible english .


Why reinvent the wheel? Check out webmin.

--

To reply, delete the 'x' from my email
Jerry Stuckle,
JDS Computer Training Corp.
js*******@attglobal.net
Member of Independent Computer Consultants Association - www.icca.org
Jul 17 '05 #2

P: n/a
On 2005-02-17, Jerry Stuckle <js*******@attglobal.net> wrote:
Shamrock wrote:

Hi,

I'm writting some scripts to management users on server
throuh www. I need to call some functions like "adduser",
"rmuser" etc. in my scripts. I'd like to know the best way
I could do this. I want secure sripts. Could anyone help me
to find solution to do this ?

best regards,
--
Shamrock

Ps. Sorry for my terrible english .


Why reinvent the wheel? Check out webmin.


Because I need to write my own scripts and I prefer php
then perl.
--
Shamrock
Jul 17 '05 #3

P: n/a
Sebastian =?iso-8859-2?Q?Tymk=F3w?= wrote:

On 2005-02-17, Jerry Stuckle <js*******@attglobal.net> wrote:
Shamrock wrote:

Hi,

I'm writting some scripts to management users on server
throuh www. I need to call some functions like "adduser",
"rmuser" etc. in my scripts. I'd like to know the best way
I could do this. I want secure sripts. Could anyone help me
to find solution to do this ?

best regards,
--
Shamrock

Ps. Sorry for my terrible english .


Why reinvent the wheel? Check out webmin.


Because I need to write my own scripts and I prefer php
then perl.

--
Shamrock


I understand that. However, in order to call adduser, etc., you will
need root access, either by running as root or changing the userid to
root (i.e. posix_setuid). This is a huge security risk.

You can get around this a little bit by having a php executible outside
the web server's root directory; this program could then have the
ability to set the uid to root. You still have a high security risk for
hackers - but at least they would be limited to whatever the program
does. You'll probably need other programs to modify and delete users
(or put everything in one program).

You will also need to have secure access (https://) to your server, to
encrypt the passwords as you add the people.

And, if you don't get everything right, a hacker can break into your
site and do anything he/she wants - like "rm -r /".

It's why I suggest webmin. The moduels are already there, tested and
work just fine. Webmin is it's own server, running on a separate port,
using secure access. There are additional modules to handle a lot of
other administrative function. And it's free.

--

To reply, delete the 'x' from my email
Jerry Stuckle,
JDS Computer Training Corp.
js*******@attglobal.net
Member of Independent Computer Consultants Association - www.icca.org
Jul 17 '05 #4

P: n/a
Thanks for your reply. I know that it's insecure
but I must write it my on own.

Best regards,

Shamrock
Jul 17 '05 #5

P: n/a

"Shamrock" <Shamrock@[cut this please]astercity.net> wrote in message
news:cv***********@mamut1.aster.pl...
Thanks for your reply. I know that it's insecure
but I must write it my on own.

Best regards,

Shamrock


Why?

Knowing the "Why" might help people understand your problem a lot better
than knowing the "what" - if you fully understood the whole problem, you
probably wouldn't be asking for help!

Matt
Jul 17 '05 #6

P: n/a
On 2005-02-19, Matt Mitchell <m_****************************@metalsponge.net> wrote:

"Shamrock" <Shamrock@[cut this please]astercity.net> wrote in message
news:cv***********@mamut1.aster.pl...
Why?

Knowing the "Why" might help people understand your problem a lot better
than knowing the "what" - if you fully understood the whole problem, you
probably wouldn't be asking for help!

It's my bechelor's degree. I use perl on console ( and I prefer manage my system via
console than www ) but this application
should be "user friendly" and got "nice appearance".
I prefer use php because I've already done engine to add,delete user to database
, manage him etc. Only what I need is do the same thing in system.

--
Shamrock
Jul 17 '05 #7

This discussion thread is closed

Replies have been disabled for this discussion.