PHP SSH2 exec“$”

时间:2015-05-13 17:34:22

标签: php ssh exec

我想知道如何在PHP中运行GET命令... 这是我的代码:

<?php
$msg = $_GET['msg'];
echo "$msg test";
if (!function_exists("ssh2_connect")) die("function ssh2_connect doesn't exist");
if(!($con = ssh2_connect("ip", 22))){
    echo "fail: unable to establish connection\n";
} else {
    // try to authenticate with username root, password secretpassword
    if(!ssh2_auth_password($con, "root", "password")) {
        echo "fail: unable to authenticate\n";
    } else {
        // allright, we're in!

        echo "okay: logged in...\n";


        // execute a command
       if (!($stream = ssh2_exec($con, 'wall echo $msg'))) {

            echo "fail: unable to execute command\n";
        } else {
            // collect returning data from command
            stream_set_blocking($stream, true);
            $data = "";
            while ($buf = fread($stream,4096)) {
                $data .= $buf;
            }
            fclose($stream);
        }
    }
}
?>

所以,它不会挂在我所说的内容中?msg = ...它只是写空白,但当我回显$ msg(就像我在代码顶部做的那样)它正常写,你们知道在哪里吗?问题?我已经尝试过“echo $ msg”和“echo $ msh”,但是同样的事情......谢谢和最好的问候!

1 个答案:

答案 0 :(得分:1)

将GET变量传递给ssh2_exec()可能是一个巨大的安全问题。但忽略这一点,单引号忽略变量 - 你需要双引号。

换句话说:改变这个

if (!($stream = ssh2_exec($con, 'wall echo $msg'))) {

到这个

if (!($stream = ssh2_exec($con, "wall echo $msg"))) {

但是,我怀疑您正在尝试使用echo作为PHP构造,而您只对$msg变量感兴趣。在这种情况下,你可以做到

if (!($stream = ssh2_exec($con, "wall $msg"))) {

if (!($stream = ssh2_exec($con, 'wall ' . $msg))) {