The one problem and serious security risk you will be introducing is
that if you run passwd as an unprivliged user you can only change the
password of the user you are running it as.  Therefore, the webserver
would be running as apache, so the only password it could change would
be for user apache.

To get passwd to change any password it has to be run as root, therefore
you would need to run the webserver as root.  You would be opening a
serious pandora's box with that option.

Since your users have access to the server through a shell account
(otherwise why bother with user accounts), you would be better served by
PuTTY or another ssh client that the users change their passwords by
logging in to the shell account.

On Fri, 24 Jan 2003 11:48:50 -0600
"Mantas Kriauciunas" <[EMAIL PROTECTED]> wrote:

> Hey!
> 
> I was wondering with what command do you execute shell commands?
> 
> What I need is to change users password on the server, I want to write
> that script and it needs to be safe. So I don't know what should I
> use. I think I will need to check username and password, then log in
> through website with it and then use passwd command on that user to
> change the password. Or maybe I am wrong, I never done something like
> that.
> 
> Thanks for any info!
> 
> -mNTKz
> 
> 
> 
> -- 
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php


-- 
Tom Woody
Systems Administrator
NationWide Flood Research, Inc.
phone: 214-631-0400 x209
  fax: 214-631-0800

Don't throw your computer out the window, 
throw the Windows out of your computer! 


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to