Hi chaps,

I am trying to generate a script that will execute terminal commands through Apache(PHP).When i got to execute commands i don't have any root permissions to do so. even tho i am logged in as root.

Could someone help me out?

i think there is some sort of command you have to enter into php but i am not sure. . .


Many Thanx
Rich.

I'll put the usual warnings about running a web script which can do things as root here...be very, very careful!

Check the PHP shell_exec manual http://us2.php.net/shell_exec - some of the comments at the bottom are regarding script root access, and may help you out a bit.

Hi, and welcome to LQ!

What are you trying to achieve, what command are you
invoking, what is the error message you're getting?


Cheers,
Tink

P.S.: I'd suggest that you let me move this to our
programming forum, better exposure there.

HI, i am at university we have a project to build a firewall in linux using iptables, basically all i wanted to do was execute bash commands in php. But i dont have the correct permissions?

WOuld you know how to do this?


Regards
Rich

If I knew which commands you're trying to execute from which
environment, maybe? And you told me what the exact error message
was ... maybe we could assess what the problem is. But with
the things you keep repeating: no.

Are you using PHP from the command-line or from within Apache?
If it's Apache: as what user is the service being run?
...

Do yourself a favour, and take ESRs advice


Cheers,
Tink

Look at using sudo. This will you specify the user Apache runs as, often www-data, to access various commands normally only accesible to the root user. As mentioned before, be careful what commands you allow, and ensure there's some kind of syntax validation within your PHP so that naughty code can't get passed to the shell. There's a host of debates as to what's the right way to do it from a security point of view! Otherwise, pretty easy to execute iptable commands. If you're wanting to do more, then again as mentioned before, tell us a bit more info.

ok,
I'm Running apache 2.0/ logged in as root

Apachectl start

I have a HTML page that will input a variable allow_ip = e.g 19.168.1.1
I have a submit button, when pressed directs to a php page.

which has the following lines:
<?php
echo exec('iptables -A INPUT -s &allow_ip -j DROP')
?>

when i run this on apache it doesnt seem to work?,when i run the command terminal it doenst block the ip.

Kind Regards
Rich