How to check if the username and password are valid?

[azio]

Hi,

I'm wondering if there's a shell command the check whether the provided username and password are valid or not.

What I'm trying to do is logging in the user into my control panel only is he has a valid and active cPanel account on the server.

Your help would be appreciated.

 

[Eric]

Howdy,

Usernames are all listed in /etc/passwd so that's a really quick way to find that information. As for password you would need to try to use it to know if it's accurate.

Thanks!

 

[KostonConsulting]

You could try to execute an XML-API call for the user with their username and pass and see if the call goes through:

https://github.com/CpanelInc/xmlapi-php

 

[charsleysa]

If writing your script in PHP you can use the cryptography functions to encrypt the password with the currently encrypted password in the shadow file as the salt, if the new encrypted password equals the old encrypted password then the password is correct otherwise it's incorrect.