CODEWITHSUNDEEP
phplinuxshellroot
Ivijan Stefan Stipić
Ivijan Stefan Stipić

Reputation: 6678

Run PHP shell_exec() like root user

I building one PHP application where I create command line functionality for Linux debian Jessie. All works fne but I need to be able use some commands like root user.

Is there a way to use shell_exec() or similar command to access like root user via PHP?

Idea of this command line is to people who have access to that server can handle with it over internet from any place or device.

Here is image of console:

enter image description here

Upvotes: 4

Views: 23253

Answers (2)

Allan Muller
Allan Muller

Reputation: 41

Edit your sudoers file

sudo vi /etc/sudoers

Put this line

www-data ALL=(ALL) NOPASSWD: ALL

www-data is the php default user in linux ( replace if necessary )

Use

$output = shell_exec('sudo XXXX');

Upvotes: 4

Hyder B.
Hyder B.

Reputation: 12296

Executing commands as root via PHP will leave yourself wide open to all sorts of malicious hackery.

Have a look at the "sudo" documentation.

You should be able to set up all the commands you need as "sudo"able scripts. It is much better to write specific scripts with limited functions than to expose the underlying priviledged command.

As in:

exec ('sudo getCurrentUser.sh')

First, you need to add the user that PHP is using to run (most of the time it is www-data) to the sudo group if it is not already assigned.

Then, in your php file:

use sudo -S, so you can pass the password via echo 

$exec = "echo your_passwd | /usr/bin/sudo -S your command";
exec($exec,$out,$rcode);

if you have trouble with the paths - use 

"bash -lc 'echo your_passwd | /usr/bin/sudo -S your command'"

so you get a new bash that acts like a login shell and has the paths set

Upvotes: 4

Related Questions