Re: [PHP] FTP and security

2002-11-27 Thread Jason Wong
On Wednesday 27 November 2002 03:25, Richard Fox wrote: > > > To relate this to php, I am ready to give up > > > trying to make my > > > > > > system("scp .."); > > > > > > code work, because I will have to give the apache user more permissions > > > than I am comfortable with. > > > > What exa

Re: [PHP] FTP and security

2002-11-26 Thread Marco Tabini
Well, as far as I know you need to have sshd (or an equivalent) running on the receiving end. Then, on your server you call up a command like so: ssh -f -2 -N -L {source-port}:{end-address}:{end-port} {sshd-server-address} -l {login} This command causes ssh to create a secure tunnel that goes fro

Re: [PHP] FTP and security

2002-11-26 Thread Bryan Koschmann - GKT
Marco, Would you have any examples for using an SSH tunnel? I'm using fsockopen to get data from proprietary server software (just returns data to me in different formats) and I would like to have it secure. I'm just not sure how I could incorporate that. Thanks, Bryan On 26 Nov 2002,

Re: [PHP] FTP and security

2002-11-26 Thread Richard Fox
> > To relate this to php, I am ready to give up > > trying to make my > > > > system("scp .."); > > > > code work, because I will have to give the apache user more permissions > > than I am comfortable with. > > What exactly are the problems you're encountering using scp? > I created an apach

Re: [PHP] FTP and security

2002-11-26 Thread Jason Wong
On Wednesday 27 November 2002 01:42, Richard Fox wrote: > To relate this to php, I am ready to give up > trying to make my > > system("scp .."); > > code work, because I will have to give the apache user more permissions > than I am comfortable with. What exactly are the problems you're encou

Re: [PHP] FTP and security

2002-11-26 Thread Marco Tabini
Rich, Why don't you create an ssh tunnel between your two boxes and then perform you ftp connection through there? This way, the connection would be secure and you could impersonate whichever user you need to. There is also a secure version of ftp, but I don't think that it can be instantiated di