Re: perl web shell

heh, it seems I can comment on the initial post as well

I just took a look at at Perl Web Shell which is just a CGI script that runs some commands or changes the current directory or lists files/directories in cwd.

The "interactivity" part that you complain about is given by goosh(which is client-side) which you need to integrate with Perl Web Shell.

But my main concern remains security(anonymous monk has just provided a solution to cross-domain ajax) , the problem still remains about what the user can run on the server and I think you will find some nice code related to that in buubot which you can check out the source of here -> svn://erxz.com/bb3

good luck and have fun(most important)

Comment on Re: perl web shell

Replies are listed 'Best First'.
Re^2: perl web shell by baxy77bax (Deacon) on Oct 12, 2009 at 15:05 UTC
thank you ppl, for all your replays! well concerning the security i was also thinking of https, and for restricting the user within it's user directory i was thinking of jailing the dir in question (chroot ssh) so the security should be on the level. (at least i hope) second : everything that has 'java' string in the word is making me allergic that is why i'm hesitating in scoping the goosh code :) but it seams i'll have to do it at some point. third : when i was referring to interactivity i was thinking more about how to evaluate each line that goes into input area (before the specific command appears) on a client-side and then after that command is entered the accumulated input is passed to the server for further evaluation. is something like this possible ? thnx baxy	[reply]

Replies are listed 'Best First'.

Re^2: perl web shell
by baxy77bax (Deacon) on Oct 12, 2009 at 15:05 UTC

well concerning the security i was also thinking of https, and for restricting the user within it's user directory i was thinking of jailing the dir in question (chroot ssh) so the security should be on the level. (at least i hope)

second :

everything that has 'java' string in the word is making me allergic that is why i'm hesitating in scoping the goosh code :) but it seams i'll have to do it at some point.

third :

when i was referring to interactivity i was thinking more about how to evaluate each line that goes into input area (before the specific command appears) on a client-side and then after that command is entered the accumulated input is passed to the server for further evaluation.

is something like this possible ?

thnx

baxy

[reply]