How to get a bash console on a home page???

ankur_linuxfan · 07-16-2005, 12:21 PM

Hi,
Does anyone know of some html or php script which can allow a user to get a bash console.....I want to host a webpage which can take username and password and if the user successfully authenticates gives the user the bash console in his home directory.....is this possible to do in a html page......

Any help would be appreciated....

thanks.....

win32sux · 07-16-2005, 12:49 PM

i'm sure it's possible (by using scripts on the server)... i remember a couple years ago i used webmin and IIRC one of the modules provided a web-based shell...

if i were you i'd probably download the webmin tarball and check-out the ssh/telnet module...

phil.d.g · 07-16-2005, 01:44 PM

There always used to be a few java applets about that did this, if you search you may find one

stefan_nicolau · 07-17-2005, 03:46 AM

Search google for ssh java applet or telnel java applet. (You will need ssh/telnet to make these applets work.)

win32sux · 07-17-2005, 02:18 PM

does anyone know how to do this on the server side without having to use java (etc) on the client side??

i'm not a coder, but it would seem to me this could be done using PHP, Perl, or Python on the server in such a manner that the client wouldn't need anything more than a HTTPS browser (without the need for a java plugin, etc.) to input shell commands and view output...

i got the impression the OP might be looking for a server-side solution:

Quote:

Originally posted by ankur_linuxfan
is this possible to do in a html page...

randyding · 07-17-2005, 03:48 PM

This generally sounds like a bad idea, hackers dream, security nightmare, etc...
But if you must do it without java the only thing left is a server side cgi.
The browser would receive a html form with a single edit box to type a command.
You would enter a single command in the edit box and press the submit button.
The form would be resent to the browser with the output of the previous
command displayed above the edit box. I don't like this idea.

stefan_nicolau · 07-17-2005, 05:43 PM

This is awfull for security. You are giving a hacker what he would otherwise have to hack your system to get: unrestricted shell access.

In addition, it is not very functionnal for the user: you can only access the computer as the apache user, you can't run interactive commands (and that includes su), the user can't access his account.