Re: PHP and Octave

[Tom Weichmann]

OOzy,

If you are considering a web interface to octave using PHP you have to take 
security into consideration.  Last summer I built a PERL wed interface to 
Octave.  Do not forget that using Octave's system() and exec() commands along 
with others allow an anonymous web user to have total user access to your 
machine.  What I had to do is put octave into a chroot environment, and alos 
try to filter out as many maliious commands as I could before sending 
commands to Octave.  When I was finished, I had a cool web Octave for others 
to try, but beeing that I am not a security expert, I never really knew if 
this was a security hole, or not.  I plan to make this code avialable to 
others soon, I just have to dig it back out of the closet!

Hope this helps,

Tom Weichmann

On Tuesday, August 21, 2001 08:42 pm, OOzy Pal wrote:
> Hi
>
> Anybody know how interface php and Octave. I know how
> to interface php and gnuplot. Is it the same with
> octave.
>
>
>
> =====
> Regards,
> OOzy
>
> What is the purpose of life?
>
> __________________________________________________
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo! Messenger
> http://phonecard.yahoo.com/



-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.

Octave's home on the web:  http://www.octave.org
How to fund new projects:  http://www.octave.org/funding.html
Subscription information:  http://www.octave.org/archive.html
-------------------------------------------------------------