12-28-2012
It is really not a good idea to run your CGI scripts as root. If someone comprosmises your web server they have won instant access to everything. If someone finds a bug in your program they can exploit it for root access. If your program misbehaves, it can damage anything. There's a reason most things don't run as root, and a reason webservers in particular get very little access to anything -- anyone in the world can cause a request to happen, and can inject any data they want with ease.
You could perhaps use sudo to allow your webserver to run very specific things as root, so you could do system("sudo /path/to/script.sh"); Don't give it a blank cheque. Only let it run very specific scripts, and write those scripts very carefully.
9 More Discussions You Might Find Interesting
1. Infrastructure Monitoring
Hi,
I'm reading net-snmp site, using C language and unix environment, I have manager ( do get/set command), agent and server ... I'm trying to monitor cpu, memory and disk usage and get Ip address of server and send the value back to agent, stored in variable which enable manager to gets the... (1 Reply)
Discussion started by: zainab
1 Replies
2. Shell Programming and Scripting
I have a requirement, which is as follows
*. Folder contains list of xmls. Script has to create new xml files by copying the existing one and renaming it by appending "_pre.xml" at the end.
*. Each file has multiple <Name>fileName</Name> entry. The script has to find the first occurance of... (1 Reply)
Discussion started by: sudesh.ach
1 Replies
3. Shell Programming and Scripting
I have file like
cp -p /var/adm/ /tmp1/tmp1.log
cp -p /var/adm/ /tmp1/tmp2.log
cp -p /var/adm/ /tmp1/tmp3.log
cp -p /var/adm/ /tmp1/tmp4.log
I need to re-write the file like:
cp -p /var/adm/tmp1.log /tmp1/
cp -p /var/adm/tmp2.log /tmp1/
cp -p /var/adm/tmp3.log /tmp1/
cp -p... (3 Replies)
Discussion started by: h_banka
3 Replies
4. Shell Programming and Scripting
I have a file containing dates like below
2010 1 02
2010 2 01
2010 3 05
i want the dates to be like below
20100102
20100201
20100305
i tired using
awk '{printf "%s%02s%02s",$1,$2,$3}'
But it does not work,it puts all the dates in one line,i want them in seperate lines like the... (6 Replies)
Discussion started by: tomjones
6 Replies
5. Shell Programming and Scripting
Hi all,
I need to write an automated bash shell script which performs such operations:
1. Grep the header of everyline with the initial of "T" in "FILE_A"
2. Perform a for loop,
Count the numbers of comma in the line of code,
if (no. of comma < 17)
ADD the comma until 17;
... (2 Replies)
Discussion started by: big_nutz
2 Replies
6. Shell Programming and Scripting
looking for a script or command to push out from a centralized machine to multiple machines. I have the software in place that will do this already, but I need to tell it what command to run on each machine with this file.
what I need is a script or command to edit a file in a specific manner.... (13 Replies)
Discussion started by: skunky
13 Replies
7. Web Development
Ok here is what I have going on.
I am listing the contest of a directory so I can edit and delete files.
The code I am using to do that is below (Other then editing as it does not work).
<?php
$directory = ("enctlfiles/");
$dir = opendir($directory);
$files = array();
while (($file =... (10 Replies)
Discussion started by: GroveTuckey
10 Replies
8. Programming
Are there any C or termina instructin code or instruction to see where is the creation or last edit for the file (1 Reply)
Discussion started by: fwrlfo
1 Replies
9. Programming
Hi guys,
I am learning C++ on my own and i wanna redit the code using classes and heritance to revamp the code below.
example class for the card attributes -suit , - rank, - face
and also class deck to contain shuffle
and a class player with the function to setcard and a function handonecard... (1 Reply)
Discussion started by: ment0smintz
1 Replies
LEARN ABOUT PHP
nsapi_virtual
NSAPI_VIRTUAL(3) 1 NSAPI_VIRTUAL(3)
nsapi_virtual - Perform an NSAPI sub-request
SYNOPSIS
bool nsapi_virtual (string $uri)
DESCRIPTION
nsapi_virtual(3) is an NSAPI-specific function which is equivalent to <!--#include virtual...--> in SSI ( .shtml files). It does an NSAPI
sub-request. It is useful for including CGI scripts or .shtml files, or anything else that you'd parse through webserver.
To run the sub-request, all buffers are terminated and flushed to the browser, pending headers are sent too.
You cannot make recursive requests with this function to other PHP scripts. If you want to include PHP scripts, use include(3) or
require(3).
Note
This function depends on a undocumented feature of the Netscape/iPlanet/Sun webservers. Use phpinfo(3) to determine if it is avail-
able. In the Unix environment it should always work, in Windows it depends on the name of a ns-httpdXX.dll file.
Read the note about subrequests in the NSAPI section (UNIX, Windows) if you experience this problem.
PARAMETERS
o $uri
- The URI of the script.
RETURN VALUES
Returns TRUE on success or FALSE on failure.
PHP Documentation Group NSAPI_VIRTUAL(3)