How to upload, authenticate and run a PHP script remotely?

Question

I'd like to set up a page on an AMP server where a user can submit a PHP file and then request it, with the following constraints:

the script needs to be authorized; not just any script can be uploaded
no info about the script should be stored on the server (at first I thought of storing a hash of the file, but can this be avoided, such as by putting the hash check at the beginning of the script itself and ensuring this part exists and is executed first?)
no MySQL or Apache authentication
assume safe mode, and the user itself is a script (cURL)

What's an efficient and secure way to implement this?

Victor Bocharsky · Accepted Answer · 2014-02-04 12:31:45Z

0

You can execute script as a string with eval function.

$script = "
echo 'Hello ';
print 'world';
";
eval($script);

NOTE: But it's a very dangerous! This script can get full access to server and can remove files, dirs, find system password etc. So be very careful

answered Feb 4, 2014 at 12:31

Victor Bocharsky

12.4k14 gold badges66 silver badges92 bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

suissidle Over a year ago

Yes, but the authorization is missing. It's the essential part, because of the danger otherwise, as you noted.

Victor Bocharsky Over a year ago

There is many solutions for autorization. You can check if user is authenticated, so he can upload PHP file, which you can read for example with file_get_contents function and then execute with eval

suissidle Over a year ago

No, as I wrote in the question it has to be pure PHP, without any user authentication.

Victor Bocharsky Over a year ago

For authorization you can read many posts, for example php sessions to authenticate user on login form

Victor Bocharsky Over a year ago

Pure PHP authentication can realize with SESSION

|

Collectives™ on Stack Overflow

How to upload, authenticate and run a PHP script remotely?

1 Answer 1

8 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

8 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related