On Fri, 15 Feb 2002, Darrell May wrote:

> 
> Charlie Brady <[EMAIL PROTECTED]> said:
> 
> > There was some discussion about running PHP in the admin web server a few
> 
> > weeks ago where I discussed some of the security implications.
> 
> Yes, and for those that understand the security implications and still need
> to run a PHP app inside the server-manager as 'admin', capable of launching
> any event/action, you may simply implement my provided solution:
> 
> http://myezserver.com/downloads/mitel/contrib/addPHP2admin-0.0.1

That won't work for all events and actions. From PHP scripts, 
"signal-event" will be run as user "admin", belonging to various groups, 
including "root". There's plenty of things that "admin" doesn't have 
permission to do.

--
Charlie Brady                         [EMAIL PROTECTED]
Lead Product Developer
Network Server Solutions Group        http://www.e-smith.com/
Mitel Networks Corporation            http://www.mitel.com/
Phone: +1 (613) 368 4376 or 564 8000  Fax: +1 (613) 564 7739



--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to