Re: Web based password changer
On Fri, Jan 23, 2004 at 04:13:35PM +1100, Michael Sharman wrote:
> > -----Original Message-----
> > From: Rene Cunningham [mailto:email@example.com]
> > Sent: Friday, 23 January 2004 4:09 PM
> > use something like
> > (sleep 1; echo $oldpasswd; sleep 1; echo $newpasswd; sleep 1;
> > echo $newpasswd) | passwd $user
> how about:
> echo $user:$newpasswd | chpasswd
Hopefully the script would not actually invoke echo - otherwise, like
anything else passed on the command line, the password will show up in
the process table for anyone or anything to see.
William Aoki KD7YAF firstname.lastname@example.org /"\ ASCII Ribbon Campaign
\ / No HTML in mail or news!