Adding linux users via a php script?

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
Termina
Forum Newbie
Posts: 18
Joined: Sat Apr 10, 2004 11:17 pm

Adding linux users via a php script?

Post by Termina »

While I'm sure it would be fairly simple (and hella insecure) to simply have a php script take data from form, and pass it through a bash script (sudo useradd etc.), is there a way to do this WITHOUT using:

exec,shell_exec,dir,readfile,dl,passthru,popen,chown,phpinfo,chown,system

All of which I've disabled for security reasons. (I may one day change php's group to users so I can enable these, and keep it so users can't use exec to view things they shouldn't in /home)
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

Post Reply