Shell Programming and Scripting

Hello,
I have a bash script update.sh that contains

Code:

rsync --delete -avz -e ssh ${files} root@64.XX.XX.XX:/websites/red/

when I use that script ./update.sh as root, it works like a charm as I set up the private/public key properly.
When run from a php script through the apache webserver

Code:

<?php
exec("update.sh");
?>

The rsync line is ignored. What could I do to have that setup work?
Thank you

apache runs php->bash->rsync as a different user => you must setup this user's ssh keys/dir.

BTW: Allowing root to connect over ssh is not recommended for security reasons. It is even less recommended to expose bash skripts, which do not check any environment variables, to the internet. It's an invitation for hackers and crackers.

What would be the right way to create a key for the apache user? Thanks.

i) because bash does not check i.e. environment variables calling bash from php is highly risky

ii) regarding keys: copy the keys from root's home to the home of the apache user and give apache user rights to read them. If someone takes over your apache he that way had root access to your remote backup machine (no difference to your current practice), which is not really what one wants. Better create a user on the backup machine with restricted rights which is more or less only allowed to write some files to one location and nothing more.

It is unclear to me what's the "home of the apache user". Is that the DocumentRoot as set in the httpd.conf file? should I copy the whole .ssh folder there?
Thank you for your help.

I have tried to put the keys in Document Root directory, changing the permissions, but nothing has worked so far. Thanks in advance for any help.

home of the apache user:

i) find out as which user your apache processes are working. top or ps will be helpful

ii) find out that user's home directory. finger or a look into /etc/passwd will help