Hide command arguments in PHP exec()

Question

I have a script, written in C, which requires 3 parameters: host, name, password, like this:

./myscript 1.1.1.1 name mypassword

I call this using PHP exec command (need to, functionality not found in PHP).

exec('./myscript $host $name $password');

In linux, using ps command, I can see:

./myscript 1.1.1.1 name password.

How can I hide my password, that you can't see it on linux using ps?

Thank you.

Do you need other outputs from ./myscript or can it be run by another process ie. you need know data returned from it if so add & should do the trick like so exec(./myscript $host $name $password &') this will basically spawn another process to handle exec ... (similar to a thread in this situation) — brendosthoughts
– brendosthoughts, Commented Aug 6, 2013 at 13:01

Damien Overeem · Accepted Answer · 2013-08-06 13:05:30Z

2

Since you are in a running environment. I'd temporary store your password in an environment variable (SET) and use this variable in your exec(). This way your password won't show up in ps.

answered Aug 6, 2013 at 13:05

Damien Overeem

4,5294 gold badges38 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

andrius.k Over a year ago

A little example pls. P.S. name and password are changing (they are for users authentication)

Damien Overeem Over a year ago

Since you already accepted an answer i doubt this is still userfull, but for setting an environment variable: php.net/manual/en/function.putenv.php

Teun Ouwehand · Accepted Answer · 2013-08-06 13:16:50Z

1

There are example out there which does something you like: http://www.lenzg.net/archives/256-Basic-MySQL-Security-Providing-passwords-on-the-command-line.html Remember, your password is still visible for a fraction of time.

edited Aug 6, 2013 at 13:16

answered Aug 6, 2013 at 13:11

Teun Ouwehand

897 bronze badges

Comments

user229263 · Accepted Answer · 2013-08-06 13:05:05Z

1

You could simply prompt the password after starting the executing of the C-script and forward the password via an pipe in PHP exec.

answered Aug 6, 2013 at 13:05

user229263

212 bronze badges

Collectives™ on Stack Overflow

Hide command arguments in PHP exec()

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related