bash from web

athrin · 04-26-2011, 08:31 PM

oh well i did what i could.
my username is apache and i also chan the path to /usr/sbin/dmidecode because my system also got it. and i also insert sudo dmidecode inside my bash script. but it didnt work =_=

micxz · 04-26-2011, 09:20 PM

Quote:

Originally Posted by athrin

oh well i did what i could.
my username is apache and i also chan the path to /usr/sbin/dmidecode because my system also got it. and i also insert sudo dmidecode inside my bash script. but it didnt work =_=

Why don't you post what you have exactly in sudoers and in your bash script? Also I thought you said php why are we back to bash again?

athrin · 04-26-2011, 09:32 PM

inside visudo

Quote:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now

apache ALL = NOPASSWD: /usr/sbin/dmidecode

inside my bash

Code:

#!/bin/bash

echo "Content-type: text/html"
echo ""
echo "<html><head><title>Server Detail</title></head>"
echo "<body>"

NAME2=$1
echo -e "<p>NAME         :$NAME1</p>"

sudo dmidecode | grep Number > /var/www/cgi-bin/dmidecode

Serial=`cat /var/www/cgi-bin/dmidecode | head -n1 | cut -d: -f2`
echo "<p>Serial"'          '":$Serial</p>"
echo "</body></html>"

inside my php

Code:

<html><head><title>Enter Details
</title></head><body>


<form name="detailfrm" method="post" action="">
<table>
<tr>
    <td>Enter Name</td>
    <td>:</td>
    <td><input type="text" name="Name"></td>
</tr>
<tr>
    <td><input type="submit" value="Submit" name="detailbtn"></td>
</tr>
</table>
</form>
</body></html>

<?php

if(isset($_POST["detailbtn"]))
{
$name1=$_POST["Name"];
$name2="....";
putenv("Name1=$name1");
system("/var/www/cgi-bin/testing.sh $name2");
}
?>

is this enough?

athrin · 04-26-2011, 09:41 PM

Quote:

Originally Posted by micxz

Why don't you post what you have exactly in sudoers and in your bash script? Also I thought you said php why are we back to bash again?

well i said that i want my dmidecode command inside bash to be able to run with web browser. in php it will ask for name like example and the name along with serial will be display inside browser.

if you got other method. please tell me

micxz · 04-26-2011, 11:44 PM

How about eliminating the bash script all together and use this in place of the php system call:

Code:

system("sudo /usr/sbin/dmidecode | grep Number | head -n1 | cut -d: -f2");

micxz · 04-26-2011, 11:51 PM

In the bash script which I suggest you don't use I see an error here:

Code:

NAME2=$1
echo -e "<p>NAME         :$NAME1</p>"

should be:

Code:

NAME1=$1
echo -e "<p>NAME         :$NAME1</p>"

athrin · 04-27-2011, 12:15 AM

Quote:

Originally Posted by micxz

In the bash script which I suggest you don't use I see an error here:

Code:

NAME2=$1
echo -e "<p>NAME         :$NAME1</p>"

should be:

Code:

NAME1=$1
echo -e "<p>NAME         :$NAME1</p>"

didnt work for me. is it work for you?

Quote:

system("sudo /usr/sbin/dmidecode | grep Number | head -n1 | cut -d: -f2");

if i use this the name or other command such as ip addrs that is if i want to add something wont show.

if only this code will run with browser

Code:

sudo dmidecode | grep Number > /var/www/cgi-bin/dmidecode

then the problem solve.

micxz · 04-27-2011, 12:26 AM

I bet safe mode is turned on in php? Works on my laptop but safe mode is off.

athrin · 04-27-2011, 12:32 AM

Quote:

Originally Posted by micxz

I bet safe mode is turned on in php? Works on my laptop but safe mode is off.

eh2.. how come you can works but i cant *_*..
my php also already turn off. but still cant

micxz · 04-27-2011, 12:52 AM

you would do this in /etc/php.ini

athrin · 04-27-2011, 01:02 AM

waaaa..... how come your place able to run this program while i couldn't run this program.. my php already off and i still cant run it. not fair!

MTK358 · 04-27-2011, 07:42 AM

Post the output of:

Code:

which dmidecode

It might be different in whatever distro you are using. I just said "/usr/sbin" because that's what Arch Linux uses.

athrin · 04-27-2011, 08:22 PM

Quote:

Originally Posted by MTK358

Post the output of:

Code:

which dmidecode

It might be different in whatever distro you are using. I just said "/usr/sbin" because that's what Arch Linux uses.

mine also /usr/sbin/dmidecode but still cant works

micxz · 04-27-2011, 08:24 PM

do you see anything in the http logs?

athrin · 04-27-2011, 08:31 PM

Quote:

Originally Posted by micxz

do you see anything in the http logs?

see anything?? like what?