Re: PHP and Octave

[OOzy Pal]

Hi Tom

I am not going to give the user a complete control.
For example, the user will input only number and
coefficients of a linear system and then my php code
will interact with octave. Will this be ok?


--- Tom Weichmann <address@hidden> wrote:
> OOzy,
> 
> If you are considering a web interface to octave
> using PHP you have to take 
> security into consideration.  Last summer I built a
> PERL wed interface to 
> Octave.  Do not forget that using Octave's system()
> and exec() commands along 
> with others allow an anonymous web user to have
> total user access to your 
> machine.  What I had to do is put octave into a
> chroot environment, and alos 
> try to filter out as many maliious commands as I
> could before sending 
> commands to Octave.  When I was finished, I had a
> cool web Octave for others 
> to try, but beeing that I am not a security expert,
> I never really knew if 
> this was a security hole, or not.  I plan to make
> this code avialable to 
> others soon, I just have to dig it back out of the
> closet!
> 
> Hope this helps,
> 
> Tom Weichmann
> 
> On Tuesday, August 21, 2001 08:42 pm, OOzy Pal
> wrote:
> > Hi
> >
> > Anybody know how interface php and Octave. I know
> how
> > to interface php and gnuplot. Is it the same with
> > octave.
> >
> >
> >
> > =====
> > Regards,
> > OOzy
> >
> > What is the purpose of life?
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make international calls for as low as $.04/minute
> with Yahoo! Messenger
> > http://phonecard.yahoo.com/


=====
Regards,
OOzy

What is the purpose of life?

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/