Styjun

Prepend last line of stdin to entire stdin

Why isn't acceleration always zero whenever velocity is zero, such as the moment a ball bounces off a wall?

Why, when going from special to general relativity, do we just replace partial derivatives with covariant derivatives?

How did people program for Consoles with multiple CPUs?

I believe this to be a fraud - hired, then asked to cash check and send cash as Bitcoin

Easy to read palindrome checker

Why isn't the Mueller report being released completely and unredacted?

Won the lottery - how do I keep the money?

Is wanting to ask what to write an indication that you need to change your story?

Where do students learn to solve polynomial equations these days?

Is it ever safe to open a suspicious HTML file (e.g. email attachment)?

Does increasing your ability score affect your main stat?

How do I align (1) and (2)?

How to get from Geneva Airport to Metabief?

Running a General Election and the European Elections together

Is there always a complete, orthogonal set of unitary matrices?

What flight has the highest ratio of time difference to flight time?

Why is the US ranked as #45 in Press Freedom ratings, despite its extremely permissive free speech laws?

Which one is the true statement?

Powershell. How to parse gci Name?

Why didn't Khan get resurrected in the Genesis Explosion?

Why is quantifier elimination desirable for a given theory?

Recycling old answers

What happened in Rome, when the western empire "fell"?

html form to pass variable to php to bash?

0

ok, this is probably more steps than needed.
I have an HTML page that asks for 2 dates (start and end) I want it to accept those dates and send them to a PHP file which will then kick off a script using those dates as variables.

main page:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Calendar lookup </title>
</head>
<link href="stylesheets/common.css" type="text/css" rel="stylesheet">

<body>

<h1>Calendar Date Range</h1>

<form method="post" action="run_script.php">


Start Date YYYY-MM-DD: <br />
<input type="text" name="Start_Date" size="35" />
<br />

End Date YYYY-MM-DD: <br />
<input type="text" name="End_Date" size="35" />
<br /> <br />

<input type="submit" value="Submit" />
<br />
</form>

</body>

that page should pass the dates to my php file-run_script.php:

<?php


$Start_Date = $_POST['Start_Date'];
$End_Date = $_POST['End_Date'];

 exec (sudo sh "gather.sh $Start_Date $End_Date ");
?>

however, it's not kicking off the gather script at all it seems. when I hit the submit button I take me to a blank page /run_script.php and never runs gather.sh (i check where it should be dumping the data nothing shows up)

I know the script works fine if I run sh gather.sh it does what I want just need to get that PHP file to kick it off for the users.

any thoughts? or is this just the completely wrong way to go about it?

Edit

As Ed pointed out it has a giant vulnerability in the PHP. so it is the wrong way.

suggestions on another way are appreciated.

php html bash

share|improve this question

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Should be sudo sh gather.sh "$Start_Date $End_Date"
  
  – EternalHour
  Mar 21 at 18:13
  
  

  
  
  
  


• 
  
  
  

  
  3
  

  
  
  
  
  
  

  
  
  Please do not deploy this code anywhere; it has a giant injection vulnerability. Anyone able to access the PHP file in a browser could use it to run arbitrary code on your machine.
  
  – Ed Cottrell♦
  Mar 21 at 18:15
  
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Not to mention there is a php syntax error. PHP has no clue what sudo sh are. You should be passing that into the string "sudo sh gather.sh $Start_Date $End_Date "
  
  – Derek Pollard
  Mar 21 at 18:23
  
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  @stcoyle why not use PHP and something like mysql or plain-text to store dates, then parse them from the plain text file with PHP
  
  – Derek Pollard
  Mar 21 at 19:28
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  At the very least you should validate that the values that come are really dates and that are in the range you expect them to be.
  
  – solarc
  Mar 21 at 19:50
  

  
  
  
  

 | 
show 3 more comments

0

ok, this is probably more steps than needed.
I have an HTML page that asks for 2 dates (start and end) I want it to accept those dates and send them to a PHP file which will then kick off a script using those dates as variables.

main page:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Calendar lookup </title>
</head>
<link href="stylesheets/common.css" type="text/css" rel="stylesheet">

<body>

<h1>Calendar Date Range</h1>

<form method="post" action="run_script.php">


Start Date YYYY-MM-DD: <br />
<input type="text" name="Start_Date" size="35" />
<br />

End Date YYYY-MM-DD: <br />
<input type="text" name="End_Date" size="35" />
<br /> <br />

<input type="submit" value="Submit" />
<br />
</form>

</body>

that page should pass the dates to my php file-run_script.php:

<?php


$Start_Date = $_POST['Start_Date'];
$End_Date = $_POST['End_Date'];

 exec (sudo sh "gather.sh $Start_Date $End_Date ");
?>

however, it's not kicking off the gather script at all it seems. when I hit the submit button I take me to a blank page /run_script.php and never runs gather.sh (i check where it should be dumping the data nothing shows up)

I know the script works fine if I run sh gather.sh it does what I want just need to get that PHP file to kick it off for the users.

any thoughts? or is this just the completely wrong way to go about it?

Edit

As Ed pointed out it has a giant vulnerability in the PHP. so it is the wrong way.

suggestions on another way are appreciated.

php html bash

share|improve this question

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Should be sudo sh gather.sh "$Start_Date $End_Date"
  
  – EternalHour
  Mar 21 at 18:13
  
  

  
  
  
  


• 
  
  
  

  
  3
  

  
  
  
  
  
  

  
  
  Please do not deploy this code anywhere; it has a giant injection vulnerability. Anyone able to access the PHP file in a browser could use it to run arbitrary code on your machine.
  
  – Ed Cottrell♦
  Mar 21 at 18:15
  
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Not to mention there is a php syntax error. PHP has no clue what sudo sh are. You should be passing that into the string "sudo sh gather.sh $Start_Date $End_Date "
  
  – Derek Pollard
  Mar 21 at 18:23
  
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  @stcoyle why not use PHP and something like mysql or plain-text to store dates, then parse them from the plain text file with PHP
  
  – Derek Pollard
  Mar 21 at 19:28
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  At the very least you should validate that the values that come are really dates and that are in the range you expect them to be.
  
  – solarc
  Mar 21 at 19:50
  

  
  
  
  

 | 
show 3 more comments

ok, this is probably more steps than needed.
I have an HTML page that asks for 2 dates (start and end) I want it to accept those dates and send them to a PHP file which will then kick off a script using those dates as variables.

main page:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Calendar lookup </title>
</head>
<link href="stylesheets/common.css" type="text/css" rel="stylesheet">

<body>

<h1>Calendar Date Range</h1>

<form method="post" action="run_script.php">


Start Date YYYY-MM-DD: <br />
<input type="text" name="Start_Date" size="35" />
<br />

End Date YYYY-MM-DD: <br />
<input type="text" name="End_Date" size="35" />
<br /> <br />

<input type="submit" value="Submit" />
<br />
</form>

</body>

that page should pass the dates to my php file-run_script.php:

<?php


$Start_Date = $_POST['Start_Date'];
$End_Date = $_POST['End_Date'];

 exec (sudo sh "gather.sh $Start_Date $End_Date ");
?>

however, it's not kicking off the gather script at all it seems. when I hit the submit button I take me to a blank page /run_script.php and never runs gather.sh (i check where it should be dumping the data nothing shows up)

I know the script works fine if I run sh gather.sh it does what I want just need to get that PHP file to kick it off for the users.

any thoughts? or is this just the completely wrong way to go about it?

Edit

As Ed pointed out it has a giant vulnerability in the PHP. so it is the wrong way.

suggestions on another way are appreciated.

php html bash

share|improve this question

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Calendar lookup </title>
</head>
<link href="stylesheets/common.css" type="text/css" rel="stylesheet">

<body>

<h1>Calendar Date Range</h1>

<form method="post" action="run_script.php">


Start Date YYYY-MM-DD: <br />
<input type="text" name="Start_Date" size="35" />
<br />

End Date YYYY-MM-DD: <br />
<input type="text" name="End_Date" size="35" />
<br /> <br />

<input type="submit" value="Submit" />
<br />
</form>

</body>

<?php


$Start_Date = $_POST['Start_Date'];
$End_Date = $_POST['End_Date'];

 exec (sudo sh "gather.sh $Start_Date $End_Date ");
?>

share|improve this question

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

share|improve this question

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

edited Mar 21 at 19:48

Tahmid Nishat

36

edited Mar 21 at 19:48

Tahmid Nishat

36

asked Mar 21 at 18:06

stcoylestcoyle

188

asked Mar 21 at 18:06

stcoylestcoyle

188