RE: setting up FTP account names via PHP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



merlin..

if you're going to allow a user to use the same user/passwd for the site,
and the FTP server.. i would strongly argue that you should allow the user
only the minimal access on the FTP server. if someone hacks your site, no
need to have them running rampant over your FTP server.

i would actually argue that you can have the same username, but separate
passwds, but i don'w know exactly what you're going to have on the FTP
server, nor do I know your skill at securing servers/services...

it doesn't really make a difference if you have separate dbs for the
user/passwd auth systems. if you secure the overall system, it's secure. if
you don't, well you're going to run into issues..

you might also look into existing web based mgmt apps for FTP servers to see
if any already exist.



-----Original Message-----
From: Merlin Morgenstern [mailto:merlin_x@xxxxxxxxxxx]
Sent: Monday, January 05, 2009 6:56 AM
To: php-general@xxxxxxxxxxxxx
Subject: Re:  setting up FTP account names via PHP


Yes, it would be great if he could use the already existing username and
password. It should not be a one time password.

I am just now looking into mysql support for pure ftpd. One solution I
have in mind is to write the password into the pureftp DB upon signup.
That would be the easiest. The other solution to write to a conf file
would be OK, too. What do you think?

bruce wrote:
> are you trying to allow a user who logs in, to use his same username when
> interfacing with the FTP server?
>
> obviously, the password for the FTP server will be different. Or are you
> looking to dynamically create a one time user/passwd for the user so that
it
> changes each time they access the FTP server?
>
>
> -----Original Message-----
> From: Merlin Morgenstern [mailto:merlin_x@xxxxxxxxxxx]
> Sent: Monday, January 05, 2009 6:44 AM
> To: php-general@xxxxxxxxxxxxx
> Subject: Re:  setting up FTP account names via PHP
>
>
> Marc Steinert wrote:
>> Merlin Morgenstern schrieb:
>>> Hello everybody,
>>>
>>> I am running a real estate site where I would like to enable bulk
>>> upload via real estate software that exports an xml file into an ftp
>>> account.
>>>
>>> In order to give every user unique access I would need to generate
>>> individual ftp name and passwords for each member. I can not see how
>>> this should work. My portal is written in PHP 4.x and there every
>>> members loges in with a unique ID. The FTP Server runns on the same
>>> linux machine. How could I generate users for this FTP server with
>>> php, for example on sign up?
>>>
>>> Thank you for any help on this.
>>>
>>> Best regards,
>>>
>>> Merlin
>>>
>> What ftp server are you using?
>>
>
> I just installed pureftpd. One possible sollution as I figured is to
> alter the virtual user table of the ftp server with php.
>
> Is this the way to go, or does somebody have a better idea that saves
> dev. time?
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux