PHP：以shell身份运行shell_exec或system？

Question

I have a few commands I need to invoke from my PHP web application that can only run as sudo .

http://php.net/manual/en/function.shell-exec.php says (in the comments) that I can do the following:

system('echo <password> | sudo -u root -S <command>');

It doesn't work. I'm trying to do a groupadd , useradd , etc. Suggestions?

Answer 1

Presumably that would only work if the user php runs as (apache, nobody or something else, depending on the apache config) has sudo enabled without password for that command. Which is rather unlikely, given the wide, yawning security hole it would open.

Answer 2

To add a user to the sudo list and have it not prompt for a password for a certain program... edit your /etc/sudoers file as such:

Cmnd_Alias BUNDLE = /usr/bin/bundle

deploy  ALL=(ALL) NOPASSWD:BUNDLE

Where deploy is the username and /usr/bin/bundle is the path the program that I want to access without password.