Re: approaches to PHP-based application interface? [message #176720 is a reply to message #176716] |
Fri, 20 January 2012 08:53 |
crankypuss
Messages: 147 Registered: March 2011
Karma:
|
Senior Member |
|
|
On 01/19/2012 08:00 AM, The Natural Philosopher wrote:
> crankypuss wrote:
>> I'm not even sure how to ask the question. Maybe it's several questions.
>>
>> Supposing one wants to run a local apache server that supports a
>> PHP-based system interface, things like file editing, file management,
>> archive support, and various other applications. For some things like
>> file management it may need root privileges. It also needs to be
>> "safe" so that the applicable parts of it can run on a public server.
>> Are there approaches to this that have been successfully used in the
>> past?
>>
>> One major advantage of sticking with PHP is that my fairly large
>> codebase won't need to be rewritten. The html/browser paradigm is
>> perfectly adequate to all the things that I can foresee doing. On
>> Windows there is this thing, http://www.zzee.com/php-gui/
>> What it does is let you plug your PHP browser-based application into a
>> stripped-down browser so it runs as a Windows application without any
>> apache involvement. But I wish to do this on Linux.
>>
>> Failing both those approaches, can anyone recommend a good GUI package
>> that supports PHP applications, preferrably something gtk-based?
>>
>> Sorry this is such a scattered question. Basically I'm working on
>> building a system-independent PHP-based system front-end, parts of
>> which can be made available on a public web server.
>
> well look at webmin first, before you decide to 'go php' for everything.
>
> There are good reasons NOT to be TOTALLY php as well.
>
> Vis if the whole php regime has 'root access' ten you are in deep
> trouble if someone hacks the php layer.
>
> Better to write specific tools in - say C - that are expressly 'su root'
> type programs designed to edit just one part of the installation.
>
> So you might write a C program that can READ any file in /var/log with
> any permissions, but not WRITE one. So as to get to your log files for
> example. But not alter them.
>
> That the way we access mysql - we cant from php access the raw data
> files, but mysqld is a daemon that can, and we talk to that...
>
>
> Miking this easier for yourself always makes it easier for an
> incompetent or malicious person to screw things up as well.
"Webmin is a web-based interface for system administration for Unix."
I'm not really much interested in "system administration", but thanks
for the thought.
What I'm really looking at is more about replacing user interfaces like
Ubuntu's Unity with something "browser-based" but which does not require
an apache server.
And I'm not looking to grant everyuser the privileges of root for that
matter, just not wanting to restrict those who have access to root
privileges via sudo for example.
I'm starting to wonder if what Firefox calls a content-plugin could be
used to recognize php and invoke the interpreter to run a file in the
user's available realm in the "non-cli" mode that apache runs php in.
Apache can't very well determine what user on localhost has sent it a
request, as far as I've been able to find. Maybe there's some way to
determine that based on the remote-user's port number but I'd really
prefer not even to have apache involved if I can avoid it.
I found php-gtk but it doesn't seem very much alive.
Still scratching my head on this one. It isn't even clear to me why
most every browser supports client-side javascript but client-side php
is an unmentionable. In a nutshell it may be that what I'm looking for
is a browser that supports client-side php.
|
|
|