Re: [PHP] apache user cannot execute useradd via sudo :(

2009-05-22 Thread Michael A. Peters
vuthecuong wrote: Yeah I know my script don't care at all about security. I'm keeping it fot the sake of simplicity. After making it 'work', I will take a look seriously about security. So, why it not create user for me? thanks and regards I'm not that familiar with sudo, but I suspect it m

Re: [PHP] apache user cannot execute useradd via sudo :(

2009-05-22 Thread vuthecuong
Michael A. Peters wrote: > > vuthecuong wrote: >> >> Hi all >> My server is centos 5.1 with php 5.1.6. >> In my app I want apache to add user through sudo. >> >> My sudoers file is: >> %apache ALL=(ALL) NOPASSWD: ALL >> %tony ALL=(ALL) NOPASSWD: ALL >> >> My test.php í: >> > $username="hixhi

Re: [PHP] apache user cannot execute useradd via sudo :(

2009-05-22 Thread Ashley Sheridan
On Fri, 2009-05-22 at 05:01 -0700, Michael A. Peters wrote: > Make damn sure you validate the $username variable whatever solution > you > end up using. Yeah, I have a funny story along those lines. I was doing the same sort of thing, but allowing it to change passwords for a user. Luckily it wa

Re: [PHP] apache user cannot execute useradd via sudo :(

2009-05-22 Thread Michael A. Peters
vuthecuong wrote: Hi all My server is centos 5.1 with php 5.1.6. In my app I want apache to add user through sudo. My sudoers file is: %apache ALL=(ALL) NOPASSWD: ALL %tony ALL=(ALL) NOPASSWD: ALL My test.php í: That's not a very secure sudoers file. But you probably don't want to use sudo