Question

I am running a cli-script, that requires a exec(‘sudo …’); call. I know it is not safe on the web, but how can it be done in cli? The script is executed by a user known as “btcdbit”, who is in the sudoers file.

Answer 1

In my experience setting the NOPASSWD option doesn’t always work and even if it does it seems unsafe. Seems to me that a better approach – if you’re able to use it – would involve using phpseclib to do sudo through SSH. eg.

<?php
include('Net/SSH2.php');

$sftp = new Net_SSH2('www.domain.tld');
$sftp->login('username', 'password');

echo $sftp->read('username@username:~$');
$sftp->write("sudo ls -la\n");
$output = $sftp->read('#Password:|username@username:~\$#', NET_SSH2_READ_REGEX);
echo $output;
if (preg_match('#Password:#', $lines)) {
    $ssh->write("password\n");
    echo $sftp->read('username@username:~$');
}
?>

The website “sudo in php” elaborates