[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Web based password changer



On Fri, Jan 23, 2004 at 04:13:35PM +1100, Michael Sharman wrote:
> > -----Original Message-----
> > From: Rene Cunningham [mailto:rene@dclabs.com.au]
> > Sent: Friday, 23 January 2004 4:09 PM
[snip]
> > use something like
> > 
> > (sleep 1; echo $oldpasswd; sleep 1; echo $newpasswd; sleep 1; 
> > echo $newpasswd) | passwd $user
> 
> how about:
> 
> echo $user:$newpasswd | chpasswd

Hopefully the script would not actually invoke echo - otherwise, like
anything else passed on the command line, the password will show up in
the process table for anyone or anything to see.

-- 
William Aoki  KD7YAF  waoki@umnh.utah.edu  /"\  ASCII Ribbon Campaign
                                           \ /  No HTML in mail or news!
                                            X
                                           / \



Reply to: