in reply to change unix password with cgi-script
Not only are you shelling out far, far too much but you have at least one huge security hole: 'echo "$passwordnew"'. Imagine if someone entered `/bin/rm -rf /` for the password!! Use single ticks in the echo command instead. (Update: added the bold italics)
But really, I think you should bail on this. It's a bad idea. Maybe tell us why it has to be a web page --there might be another way to do this.
Elda Taluta; Sarks Sark; Ark Arks
My deviantART gallery
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^2: change unix password with cgi-script
by jellisii2 (Hermit) on Jun 08, 2011 at 17:12 UTC | |
|
Re^2: change unix password with cgi-script
by duelafn (Parson) on Jun 09, 2011 at 15:45 UTC |