Is it possible to use PHP to change the password of the user account?
I find that there is a function "shell_exec()" in PHP to run the system command. However, I am not sure whether it can use PHP to run "passwd" to change the password successfully. The version of the Linux using is 7.3.
Thanks very much for the attention.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
hi ppk78,
You can also use:
SET PASSWORD FOR jeffrey@"%" = PASSWORD('biscuit');
or
GRANT USAGE ON *.* TO jeffrey@"%" IDENTIFIED BY 'biscuit';
for the last one you don't need the PASSWORD func.
You must have the privliges to do so.
This is good for mysql, If you are talking about linux, well this is not such a good idea, anyway if you are using it via Apache, it wouldn't have the permissions to do so, as it runs as 'apache' (in some systems even as 'nobody').
Eldad.
Some of the previous comments seem to be for changing a MySQL user passwords, but the original question appears to be for a shell account.
The problem is, because Apache runs as a non-root user, it will not be able to run shell commands as root (which is required to run passwd). You would probably need a wrapper script that's SUID'd to root, which when called from a PHP script will call the passwd command.
It's theoretically possible, but it seems like a pretty big security risk to me.
I believe I can at least point you in the correct direction and show you an example of this type of situation in use. I'm not totally sure how you are going to be using this function so I can't offer full-blown code, but the example I will reference is the plug-in option that can be added to SquirrelMail to allow users to change their passwords. The key elements are:
1. Squirrelmail application
download at: http://www.squirrelmail.or
2. Change Password plug-in
download at: http://www.squirrelmail.or
3. poppassd must be installed on the mail server. This is included with the Change Password package.
From the readme file of Change Password plug-in:
If you experience problems, first make sure that your mail server is running poppassd, and it is answering to port 106, and when telnetting to that port (with "telnet mail.server.address 106"), you can do this:
user YourUsername
pass YourPassword
newpass ANewPassword
and it should change your password.
So, poppassd provides the option to change the password through port 106 from a php script. Take a look at the way the PHP code is implemented using Squirrel Mail and Change Password and you should be able to adapt it to your specific application and just hook into the poppassd functions. Not sure what your goal is exactly, but all the code is there for you to work with.
I hope this helps. This is my first comment, so go easy on me, ok?
Business Accounts
Answer for Membership
by: mjlindleyPosted on 2002-09-07 at 02:23:58ID: 7268823
I would have thought that you could do it via a standard MySQL query (assuming that you have suitable rights on the database).
Try something like: (I don't have MySQL on this PC but I'm sure you could check out the tables in the "mysql" database. I've not tested this code so you might have to make small alterations other than entering the usernames and password you need.
<?
// set up db connection
$connection = mysql_connect("localhost",
$db = mysql_select_db("mysql", $connection) or die("Can't select db");
// define query
$sql = "UPDATE users SET password = \"new_password\" WHERE user = \"username\"";
// do query
if ($result = mysql_query($sql, $connection)) {
echo "Updated password";
} else {
echo "Update failed:<br><br>" . mysql_error();
}
?>
I hope this helps,
M@