updating .htpasswd file using exec()

[Jess1]

Can anyone spot my mistake in the below??

exec("htpasswd -b ".$POST['username']." ".$POST['password_1'])
or die(".htpasswd file update has failed");

The .htpasswd file for the purpose of this test is in the same directory as the script running the above code.

Thanks for your help

Jess1

[dalecosp]

You might try grabbing a return value (see the manual for [man]exec/man and printing out the value. Many system calls (in the C language, ergo, Unix, Linux, BSD, etc) return zero on success, which PHP would interpret as failure and therefore execute the [man]die/man portion of your statement.

Another questions would be, "is safe mode on for this PHP installation?". If it is, the next question should be, "is this executable allowed (i.e., in the safe_mode_exec_dir) ??

HTH,

Roger Rabbit

j/k 😃