ftp_exec

[cruel]

I need to submit a shell script execution request so I resort to ftp_exec. FTP connection etc are fine, but ftp_exec won't do anything. PHP script I used is nothing fancy just ftp_exec($ftp_connection, $command).

Is there any configuration I missed or any debugging tools/functions I could use to find out why?

I use Apache 1.3.34, PHP 4.4.2, thanks!

 

[sleipnir214]

Can we see your script, please?


Want the best answers? Ask the best questions! TANSTAAFL!

 

[cruel]

$ftp_connection = ftp_connect($_POST['host']);
ftp_login($ftp_connection, $_POST['user'], $_POST['passwd']);

$command = 'ls > file_list';
ftp_exec($ftp_connection, $command);

then it produces an error message:

Warning: ftp_exec(): 'SITE EXEC ls ': command not understood.

Thanks

 

[sleipnir214]

I think the operative warning comes from a user-supplied comment on the ftp_exec() online manual page:

A word of caution, execution via FTP isn't very widely supported. Check that it works on the servers that you intend to connect to before you start coding something that requires this.

If you want a directory listing, I think you should try ftp_nlist() (

http://www.php.net/manual/en/function.ftp-nlist.php)

Want the best answers? Ask the best questions! TANSTAAFL!

 

[cruel]

Thanks for the response. I saw that warning before, but I could use a bit more specific information as to why it does not work? All other php ftp function works the unix server, so it has to be ftp_exec specific, i.e., execute an unix server command via ftp.

 

[sleipnir214]

It does not work because the FTP server to which you are connecting does not allow the execution of arbitrary commands.


Want the best answers? Ask the best questions! TANSTAAFL!

 

[cruel]

You are definitely right. I googled SITE EXEC, here is one of what it pops up:

http://www.infosec.uga.edu/soc/ips/attackEncyclopedia/docs/0x40503300.html

 

[jpadie]

just in case it is useful, i have found that one of my hosts allows (probably by oversight) the execution of system commands notwithstanding that i do not have root access.

i use the excellent php terminal emulator (phpterm.sourceforge.net) to enter the commands.