run 'useradd' command by php?

[Anon]

Hi all!

I wanna run 'useradd' shell command by php on the web. even it make some problems in security, wanna learn how can I do that.

I typed source like as following.

<?
system("./useradd test -p****",$result);
print $result;
?>

but, I had page that displays only "2".
'cause $result got string "2".

I guess it is problem on permission. so I've copied 'useradd' file to some anothername and change his owner to nobody:nobody or apache:apache. but I also doesn't worked.

How can I run shell commands like as this on permission problem?

• LAZIEL http://www.laziel.com

[gurubob]

Hi,

I wanted to do something like this a while ago using CGI. I tried to read up on how to use the su() function but got confused. I would NOT recommend using this procedure now but this is what I did:

1. Set up a cron job for root that would read the file and run the adduser command.

2. Wrote the username/password etc into a file that root could access (eg, /tmp/newuser.txt)

(repeat step 2 as necessary)

It worked fine but this is a MAJOR security issue.

Cheers,

• Bob -