Hi All,
Now i know you are all going to frown at me on this one, but i do need you help, and the most secure way to perform this action.
I have a script running at the moment that allows people to register for e-mail accounts on my servers. This requires them to have a linux account (it cannot be done in a database or anything like that). The script is running taint, and regexps on user input, as well as checking to see if the chosen username already exists.
That script then goes off and calls another script that is suid, which adds the user account, edits postfix files and creates quota's.
Previous to this, i was running the second script via cron, so it was not suid, but people were complaining because accounts were only getting created every 30 minutes - and if i lowered the cron times, it would be a waste of resources when there were no accounts to add.
So, what is the best way to allow people on my website to create their own linux accounts - as i don't fancy manualy adding 600 accounts per day!
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.