Need help getting a web page to start a server.


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Need help getting a web page to start a server.
# 15  
Old 11-13-2018
Neo, read the initial post, its not about web auth.


I have solved this now. I was on the right track but had to add www-data as a sudoer which is what I was having problems with as webmin wont allow you to do it. You must be using ssh or on the server directly. The other thing required is that www-data have a valid password.
This User Gave Thanks to Stuperfied For This Post:
# 16  
Old 11-13-2018
Yes, I read all the posts.

Adding www-data to sudoers in not a very secure way to so this; and it is not the way I would do this and I have been doing this for more than 15 years.

You are making your web-server user id run at super user privileges; and this is not secure.

But, you seem to not want to listen to people with 15 years experience doing what you are trying to do for the first time, so I think better I do not help you; since I have done what you are trying to do many, many times, and have never, ever given a web server super user privs for any task.

Some people just simply like to do things in insecure, not well designed ways; and not listen to those who have done it correctly and securely many times Smilie

Good luck!


Note: For anyone else reading this thread in the future. Never run your web server user id (uid) with root privileges or sudo privs (as in the "solution" in this post). Never do it. It is a huge security risk you do not want nor need to ever do. A web server should never run as root or as sudo root or otherwise.
# 17  
Old 11-15-2018
I will second that note. I am 39 years old, have been running windows based servers for around 25 years, I have a certificate 3 and 4 in networking with security components, about half way through my bachelor of comp sci and about to take on my diploma in networking. I have taken steps to completely isolate my servers on the network, including but not limited to multiple gateways, routing, firewalls and port management. Do not do what I am doing as it will open up not only your server but your entire network to attack.


NEO: Please don't be mad with me, I do understand and I do welcome your advice however as mentioned before, I am not concerned with the security issues of privately hosted public minecraft servers.

------ Post updated at 01:42 AM ------

I would like to propose a more secure way of doing this, which after some testing I have found works just as well. Rather than adding www-data to the sudoers, simply use php to write to a file and have a script monitor that file for changes. The limitation is that a script would likely be run on a cron job which I think the minimum interval is 1 minute. If you would like more help with this method, please create a new thread.



Here is the php code to write to the file.

Code:
<?php

if ($_GET['start']) {
  $old_path = getcwd();
  chdir('/my/path/');
  
  # This code will run if ?run=true is set.  
  $output = shell_exec("echo 'start' > ./operations.txt"); # You can also use >> to append.
  echo $output;

  chdir($old_path);
}
?>


<!-- This link will add ?run=true to your URL, myfilename.php?run=true -->
<a href="?start=true" color="green">start</a>


Last edited by Stuperfied; 11-15-2018 at 09:48 PM..
# 18  
Old 11-16-2018
The first thing you should do is to insure you have SSH set up for your entire web server and no non HTTPS traffic is permitted.

The second thing you must do it to set up basic apache2 security to require an htpasswd user id and login for basic authentication access to your web server.

The third thing you must do it so set up iptables so only the handful of IP addresses you control are permitted to even connect to the web server.

These are the bare minimum requirements.

Then, on the PHP side, you do not need to use sudo if you set it up correctly. No good web server admin sets up their web server with the user id of the web server (in your case www-data) in the sudoers file. There are better and more secure ways to do it.... but as you said, you don't care about security, so why should we waste our time.

There is no excuse for setting up apache2 and PHP on a LAMP server in an insecure way; when it can easily be done securely and correctly.

One last point, I'm not angry in the least. I don't have emotions when others do things wrong or in a very insecure way on their servers. In fact, after decades on the net, I don't get angry, upset, or have any emotion about anything in these or other forums or sites; but we admins and moderators will enforce rule violations, and so far you have not broken any rules, LOL . Thank you for always following the forum rules. Much appreciated.

In general, I am concerned about cybersecurity, professionally speaking.

Cheers and good luck!

PS: If you truly have a web server where you do not care in the least about security, then just set up apache2 to run with the userid of root and not www-data and be done with it. LOL.... then you can do whatever you want, insecurely as you like Smilie Easy.
# 19  
Old 11-16-2018
We have all of that except for the IP tables as some of the managers are on dynamic IP's. Admittedly I could look at the range they are being assigned and restrict it to that subnet but too much work for too little benefit. It's all working now and im switching to the file method I mentioned above as I was only using www-data as a sudoer because I could find no other option.
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. Web Development

Unable to start the apache web server

Hi All, I'm getting this below error bash-4.1$ ./apachectl -k start (98)Address already in use: make_sock: could not bind to address hostname:18000 no listening sockets available, shutting down Unable to open logs I tried to change the port number, still same error: ... (5 Replies)
Discussion started by: raghur77
5 Replies

2. Web Development

Call shell script from HTML page - without web server

Hi, I have html page in my unix machine(server), which I will open with firefox or mozilla available in unix machine. Firefox or mozilla will be opened using x windows. Since I have access to unix machien(like other users) and this HTML page is for user having access to Unix machine, I see no... (7 Replies)
Discussion started by: vamanu9
7 Replies

3. Cybersecurity

APACHE: Tie in Web Page login with server login

Hello, I have created a web page on a server using apache and added .htaccess and .htpasswd in the folder for authentification. I was wondering if there was anyway to tie-in the login for this page with the login used to logon to the server. i.e. the same login info. is used for both, when... (1 Reply)
Discussion started by: WhotheWhat
1 Replies

4. Web Development

APACHE: Tie in Web Page login with server login

Hello, I have created a web page on a server using apache and added .htaccess and .htpasswd in the folder for authentification. I was wondering if there was anyway to tie-in the login for this page with the login used to logon to the server. i.e. the same login info. is used for both,... (2 Replies)
Discussion started by: WhotheWhat
2 Replies

5. UNIX for Dummies Questions & Answers

Opening web page in remote server

Hi all, I am new to UNIX and so am struggling a bit on using the right commands. I am working on a remote UNIX server and i need to load a web page using firefox. I can use the client IP address to access the web page but i am not able to do so because the command i am typing is wrong. ... (1 Reply)
Discussion started by: greg15
1 Replies

6. Solaris

Solaris 9 Web Start Upgrade using -nowin - still complains about X server

Hi there. I'm trying to upgrade a Sun Blade 100 to Solaris 9. I downloaded and burned the install, disc 1, disc 2 and tools CDs from Sun. I turned off auto-boot, put in the CD and enter the following: # boot cdrom -nowin The cdrom boot starts, and I get prompted to choose a language... (2 Replies)
Discussion started by: calenti
2 Replies

7. Shell Programming and Scripting

finding the web page on server

Wish you all a very happy new year. I have a web url "http://marabou.mis.amat.com/cgi-bin/iman?IMAN_server_report=full" where marabou.mis.amat.com is my server name. the page content is below. ********************************************************* TcEng Web server report Thu Jan 4... (4 Replies)
Discussion started by: Krrishv
4 Replies

8. UNIX for Dummies Questions & Answers

Accessing Web Page

Hello, I am new to unix, but wanted to know how can we fetch data from a web page (i.e. an HTML Page), my requirement is to read an html page and wanted to create a flat file (text file) based on the contents available in the mentioned HTML page. Thanks Imtiaz (3 Replies)
Discussion started by: Imtiaz
3 Replies
Login or Register to Ask a Question