How do PHP scripts get permission to control Nginx startup and stop?

Solve the problem of PHP script controlling Nginx startup and stop permissions

This article discusses how to use PHP scripts to control the start and stop of an Nginx server. Many users try to execute system commands using shell_exec() function, but the command execution fails due to insufficient permissions. For example, shell_exec('service nginx stop') seems to be successful, but the Nginx service does not actually stop.

The root cause of the problem is that PHP scripts are usually run as non-root users (such as www-data), and the service command requires root permissions to operate the system. Even if the command returns "done", it does not mean that the service has been successfully stopped.

Solution: Grant sudo permissions

To solve this problem, it is necessary to give PHP runners (such as www-data) permission to execute sudo commands without a password. This requires careful editing of the /etc/sudoers file. It is strongly recommended to use the visudo command to edit the file to avoid file corruption:

 sudo visudo

Add the following line at the end of the /etc/sudoers file:

 <code># 允许www-data用户无需密码执行所有sudo命令www-data ALL=(ALL) NOPASSWD: ALL</code>

Note: ALL=(ALL) NOPASSWD: ALL gives www-data users extremely high permissions. Please adjust the permission scope according to actual needs. Only necessary commands are allowed to be executed, such as www-data ALL=(ALL) NOPASSWD: /usr/sbin/service nginx * Only operation of nginx services are allowed.

After the modification is completed, the commands in the PHP code should be changed to:

 $command = 'sudo service nginx stop';
$output = shell_exec($command);
echo $output; // Output command execution result

Additional steps in the Docker environment:

In the Docker container, you need to install sudo first:

 apt-get update && apt-get install -y sudo

Then, follow the steps above to modify the /etc/sudoers file. Make sure that sudo is correctly configured in the container and that the /etc/sudoers file modification takes effect.

Through the above steps, the PHP script can obtain sufficient permissions to control the start and stop of the Nginx service. Remember, modifying the /etc/sudoers file requires careful operation, as incorrect configuration may lead to system instability. It is recommended to back up the file before modification and carefully check the correctness of the configuration after modification.

The above is the detailed content of How do PHP scripts get permission to control Nginx startup and stop?. For more information, please follow other related articles on the PHP Chinese website!