blocks|key|539317|text|如果可用，您可以使用posix_geteuid探测当前用户帐户，然后使用posix_getpwuid获取用户名。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|539318|$username+=+posix_getpwuid(posix_geteuid())['name'];|code-block|syntax|javascript|539319|但是，如果您在安全模式下运行(当exec被禁用时通常就是这种情况)，那么您的PHP进程不太可能在默认的www-data或apache帐户下运行。|539320|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/posix_geteuid|1|http://php.net/posix_getpwuid^0|A|D|10|E|A|D|0|10|E|1|0|0|1F|8|1O|6|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@$9|11|A|12|1|13]|$9|14|A|15|1|16]]|E|$]]|$1|F|3|G|5|H|7|17|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|18|8|@$9|19|A|1A|B|C]|$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|M|3|-4|5|6|7|1D|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]|U|$5|P|Q|R|E|$S|V]]]]

If available you can probe the current user account with <a href="http://php.net/posix_geteuid" rel="noreferrer"><code>posix_geteuid</code></a> and then get the user name with <a href="http://php.net/posix_getpwuid" rel="noreferrer"><code>posix_getpwuid</code></a>.

<pre><code>$username = posix_getpwuid(posix_geteuid())['name'];
</code></pre>

If you are running in safe mode however (which is often the case when exec is disabled), then it's unlikely that your PHP process is running under anything but the default <code>www-data</code> or <code>apache</code> account.

blocks|key|539227|text|<?php+echo+exec('whoami');+?>|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|539228|entityMap^0|0|T|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

<code>&lt;?php echo exec('whoami'); ?&gt;</code>

blocks|key|539345|text|一种落后的方式，但没有exec/system：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|539346|file_put_contents("testFile",+"test");
$user+=+fileowner("testFile");
unlink("testFile");|code-block|syntax|javascript|539347|如果您创建了一个文件，则所有者将是PHP用户。|539348|这也可能与任何临时文件函数(如tempnam()+)一起运行，该函数在临时目录中创建一个随机文件并返回该文件的名称。如果由于权限、open_basedir或安全模式等原因导致无法写入文件而出现问题，通常仍会允许使用临时目录。|offset|length|style|CODE|539349|entityMap|0|LINK|mutability|MUTABLE|url|https://php.net/tempnam^0|0|0|0|F|9|1T|C|F|9|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|Z|8|@$K|10|L|11|M|N]|$K|12|L|13|M|N]]|9|@$K|14|L|15|1|16]]|A|$]]|$1|O|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

Kind of backward way, but without exec/system:

<pre><code>file_put_contents("testFile", "test");
$user = fileowner("testFile");
unlink("testFile");
</code></pre>

If you create a file, the owner will be the PHP user.

This could also likely be run with any of the temporary file functions such as <a href="https://php.net/tempnam" rel="noreferrer"><code>tempnam()</code></a>, which creates a random file in the temporary directory and returns the name of that file. If there are issues due to something like the permissions, <code>open_basedir</code> or safe mode that prevent writing a file, typically, the temp directory will still be allowed.

blocks|key|755962|text|更多细节将是有用的，但假设它是一个linux系统，假设php在apache下运行，它将以任何apache用户的身份运行。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|755963|一种简单的检查方法(同样，假设有一些类似unix的环境)是使用以下命令创建一个php文件：|755964|<?php
++++print+shell_exec(+'whoami'+);
?>|code-block|syntax|javascript|755965|这将为您提供用户。|755966|对于我的AWS实例，当我运行这个脚本时，我会得到apache作为输出。|offset|length|style|CODE|755967|entityMap^0|0|0|0|0|O|6|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|V|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|W|8|@$M|X|N|Y|O|P]]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

More details would be useful, but assuming it's a linux system, and assuming php is running under apache, it will run as what ever user apache runs as.

An easy way to check ( again, assuming some unix like environment ) is to create a php file with:

<pre><code>&lt;?php
 print shell_exec( 'whoami' );
?&gt;
</code></pre>

which will give you the user.

For my AWS instance, I am getting <code>apache</code> as output when I run this script.

blocks|key|755864|text|您可以尝试像这样使用反引号：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|755865|echo+`whoami`;|code-block|syntax|javascript|755866|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can try using backticks like this:

<pre><code>echo `whoami`;
</code></pre>

blocks|key|539425|text|我将使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|539426|lsof+-i
lsof+-i+%7C+less
lsof+-i+%7C+grep+:http|code-block|syntax|javascript|539427|其中的任何一个。您可以在ssh命令行中键入em，您将看到哪个用户正在监听什么服务。|539428|你也可以去查看这个文件：|539429|more+/etc/apache2/envvars|539430|并查找以下代码行：|539431|export+APACHE_RUN_USER=user-name
export+APACHE_RUN_GROUP=group-name|539432|要过滤出envvars文件数据，可以使用grep：|539433|+more++/etc/apache2/envvars+%7Cgrep+APACHE_RUN_|539434|entityMap^0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|Z|8|@]|9|@]|A|$]]|$1|K|3|L|5|D|7|10|8|@]|9|@]|A|$E|F]]|$1|M|3|N|5|6|7|11|8|@]|9|@]|A|$]]|$1|O|3|P|5|D|7|12|8|@]|9|@]|A|$E|F]]|$1|Q|3|R|5|6|7|13|8|@]|9|@]|A|$]]|$1|S|3|T|5|D|7|14|8|@]|9|@]|A|$E|F]]|$1|U|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|V|$]]

i would use:

<pre><code>lsof -i
lsof -i | less
lsof -i | grep :http
</code></pre>

any of these. You can type em in your ssh command line and you will see what user is listening what service.

you can also go and check this file:

<pre><code>more /etc/apache2/envvars
</code></pre>

and look for these lines:

<pre><code>export APACHE_RUN_USER=user-name
export APACHE_RUN_GROUP=group-name
</code></pre>

to filter out envvars file data, you can use grep:

<pre><code> more /etc/apache2/envvars |grep APACHE_RUN_
</code></pre>

blocks|key|539244|text|exec('whoami')将执行此操作|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|539245|<?php
echo+exec('whoami');
?>|code-block|syntax|javascript|539246|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/manual/en/function.exec.php^0|0|E|0|E|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@$9|V|A|W|1|X]]|E|$]]|$1|F|3|G|5|H|7|Y|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|L|$M|$5|N|O|P|E|$Q|R]]]]

<a href="http://php.net/manual/en/function.exec.php" rel="noreferrer"><code>exec('whoami')</code></a> will do this

<pre><code>&lt;?php
echo exec('whoami');
?&gt;
</code></pre>

blocks|key|539806|text|您可以直接从shell运行：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|539807|php+-r+"echo+exec('whoami');"|code-block|syntax|javascript|539808|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Straight from the shell you can run:

<pre><code>php -r "echo exec('whoami');"
</code></pre>

blocks|key|756176|text|将文件info.php添加到以下目录-默认的http/apache目录-通常为/var/www/html|type|unstyled|depth|inlineStyleRanges|entityRanges|data|756177|包含以下内容|756178|<?php+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
phpinfo();++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
?>++|code-block|syntax|javascript|756179|然后httpd/apache重新启动，转到默认的html目录http://enter.server.here/info.php。|offset|length|756180|将提供整个php血统！|756181|entityMap|0|LINK|mutability|MUTABLE|url|http://enter.server.here/info.php^0|0|0|0|U|X|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|Z|8|@]|9|@$K|10|L|11|1|12]]|A|$]]|$1|M|3|N|5|6|7|13|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

add the file info.php to the following directory - your default http/apache directory - normally /var/www/html

with the following contents 

<pre><code>&lt;?php 
phpinfo(); 
?&gt; 
</code></pre>

Then httpd/apache restart
the go to your default html directory 
<a href="http://enter.server.here/info.php" rel="nofollow noreferrer">http://enter.server.here/info.php</a>

would deliver the whole php pedigree!

blocks|key|539507|text|在我的设置中，我想在开始一个进程之前检查当前进程是否有创建文件夹、子文件夹和文件的权限，如果看起来没有权限，我想建议一个解决方案。我想在各种情况下运行stat(<file>)，以确保权限与正在运行的进程的权限相匹配(我使用的是php-fpm，所以它根据池的不同而不同)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|539508|Mario上面给出的基于posix的解决方案看起来很完美，但是posix扩展似乎被禁用了，所以我无法执行上面的操作，因为我想将结果与运行stat()的响应进行比较，因此在单独的shell中运行whoami也没有什么帮助(我需要uid和gid，而不是用户名)。|539509|然而，我发现了一个有用的提示，我可以通过stat(/proc/self)和stat(/proc/self/attr)查看文件的uid和gid。|539510|希望这对其他人有帮助|539511|entityMap^0|23|C|0|2O|6|0|K|G|11|L|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|T|8|@$9|U|A|V|B|C]|$9|W|A|X|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|Y|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|M|$]]

In my setup I want to check if the current process has permission to create folders, subfolders and files before I begin a process and suggest a solution if it looks like I can't. I wanted to run <code>stat(&lt;file&gt;)</code> on various things to ensure the permissions match those of the running process (I'm using php-fpm so it varies depending on the pool). 
The posix based solution Mario gave above, seems perfect, however it seems the posix extension is --disabled so I couldn't do the above and as I want to compare the results with the response from running stat() running <code>whoami</code> in a separate shell isn't helpful either (I need the uid and gid not the username). 

However I found a useful hint, I could <code>stat(/proc/self)</code> and <code>stat(/proc/self/attr)</code> and see the uid and gid of the file. 

Hope that helps someone else

blocks|key|756114|text|我通常用|type|unstyled|depth|inlineStyleRanges|entityRanges|data|756115|<?php+echo+get_current_user();+?>|code-block|syntax|javascript|756116|如果对你有帮助，我会很高兴的|756117|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I usually use

<pre><code>&lt;?php echo get_current_user(); ?&gt;
</code></pre>

I will be glad if it helped you

blocks|key|539564|text|$_SERVER["USER"]

$_SERVER["USERNAME"]+|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|539565|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>$_SERVER["USER"]

$_SERVER["USERNAME"] 
</code></pre>

blocks|key|756279|text|<?php+phpinfo();+?>|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|756280|另存为info.php和|unstyled|756281|在浏览器中打开info.php|756282|ctrl%2Bf然后键入以下任意一项：|756283|APACHE_RUN_USER
APACHE_RUN_GROUP
user/group|756284|您可以看到运行apache的用户和组。|756285|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|R|8|@]|9|@]|A|$]]|$1|G|3|H|5|F|7|S|8|@]|9|@]|A|$]]|$1|I|3|J|5|F|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|U|8|@]|9|@]|A|$B|C]]|$1|M|3|N|5|F|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|F|7|W|8|@]|9|@]|A|$]]]|P|$]]

<pre><code>&lt;?php phpinfo(); ?&gt;
</code></pre>

save as info.php and

open info.php in your browser

ctrl+f then type any of these:

<pre><code>APACHE_RUN_USER
APACHE_RUN_GROUP
user/group
</code></pre>

you can see the user and the group apache is running as.

blocks|key|756341|text|您可以使用以下命令：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|756342|<?+system('whoami');?>|code-block|syntax|javascript|756343|或|756344|<?+passthru('whoami');?>|756345|756346|<?+print+exec('whoami');?>|756347|756348|<?+print+shell_exec('whoami');?>|756349|请注意，get_current_user()将返回当前PHP脚本的所有者的名称！|offset|length|style|CODE|756350|entityMap^0|0|0|0|0|0|0|0|0|4|I|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|Z|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|10|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|11|8|@]|9|@]|A|$E|F]]|$1|K|3|H|5|6|7|12|8|@]|9|@]|A|$]]|$1|L|3|M|5|D|7|13|8|@]|9|@]|A|$E|F]]|$1|N|3|H|5|6|7|14|8|@]|9|@]|A|$]]|$1|O|3|P|5|D|7|15|8|@]|9|@]|A|$E|F]]|$1|Q|3|R|5|6|7|16|8|@$S|17|T|18|U|V]]|9|@]|A|$]]|$1|W|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|X|$]]

You can use these commands :
<pre><code>&lt;? system('whoami');?&gt;
</code></pre>
or
<pre><code>&lt;? passthru('whoami');?&gt;
</code></pre>
or
<pre><code>&lt;? print exec('whoami');?&gt;
</code></pre>
or
<pre><code>&lt;? print shell_exec('whoami');?&gt;
</code></pre>
Be aware, the <code>get_current_user()</code> returns the name of the owner of the current PHP script !

blocks|key|756244|text|$user+=+$_SERVER['REMOTE_USER'];|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|756245|http://php.net/manual/en/reserved.variables.server.php|unstyled|offset|length|756246|经过身份验证的用户|756247|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/^0|0|0|1I|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|T|8|@]|9|@$G|U|H|V|1|W]]|A|$]]|$1|I|3|J|5|F|7|X|8|@]|9|@]|A|$]]|$1|K|3|-4|5|F|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

<pre><code>$user = $_SERVER['REMOTE_USER'];
</code></pre>

<a href="http://php.net" rel="nofollow noreferrer">http://php.net/manual/en/reserved.variables.server.php</a>

Authenticated user

I need to detect if php is running as nobody. How do I do this? 

Are there any other names for "nobody"? "apache"? Any others?

How to check what user php is running as?

我需要检测php是否正在以无人身份运行。我该怎么做呢？“无名之辈”还有其他的称谓吗？“阿帕奇”还有别的吗？

问如何检查php以什么用户身份运行？
EN

回答 15

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何检查php以什么用户身份运行？EN

回答 15

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何检查php以什么用户身份运行？
EN