Hello, I'm planning to build a website/service/script that would provide the user with the ability to connect to a server using their ssh login and visually view, edit and move files & folders. (a.k.a - Sort of a web-based version of VNC). What I'm wondering is: - What do you think about this idea? - What security features would you implement? - Would you use it? - If it was provided as a free script that you could install on your servers would you offer it to your users? - Besides moving/editing/searching/copying/viewing/wget what other tools would you implement? - What would you name it? Appreciate and await your responses.
I like the idea, but isn't that similar to using a program such as WinSCP? That's what I'm currently using and it does pretty much everything you described except client side. Please correct me if I'm wrong.
What I'm talking about is more of an entirely html/javascript visual interface for modifying a server. I've also thought about adding the ability to upload files from your computer directly to a folder on the server your connected to. I think its different from what other services offer because it would allow the user to connect to the server on a low bandwidth connection, view the files/folders and modify them visually as opposed to entering commands or viewing the entire screen (unlike WinSCP which requires a download to use). Newer users to ssh/linux could benifit from the ability to visually see what they are working on. As an example if you've ever tried to manage your server from a droid phone or from a slow internet connection you quickly become frustrated because of the bandwidth limits and the inability to view files/folders in a "gui." Here is a list of features I'd like to implement: - View files/folders - Edit/Create/Rename/Delete files/folders - Search for files/folders - Enter commands via ssh (optional) - Upload files directly from your computer to any folder on your server. - Setup installations to run on your server in the background (aka cpanel/direct admin/etc) - View image files stored on the server (Haven't quite figured out how to make this possible, yet) - Start/Stop services & processes - See top - Save a list of commands preformed since connection - Restart/shutdown server - Send/receive email if setup.
So it's like a combination of a FTP client and a control panel? ..but with more power. I'd be interested. As for security, maybe setup users stored in a SQL db? and over SSL of course
it is a good idea! however I'm very concerned with the security as well, do you store any of user data inside your db? We are filling our server's root password inside your website, how can you assure us (users) that our passwords is safe? As far as 2 questions above is answered, the web-tools will be a great innovation One idea in my mind : Web-based FXP transfer!
Feature wise if you have some automated system which installs some server softwares then maybe people would try it out but getting the trust of people would not be easy
Webmin doesn't exactly entail what I'd like to accomplish I'd like the end user to see something similar to a "desktop" unlike webmin which has seperate sections and looks exactly like a control panel this would look more interactive if you will. Security wise the system wouldn't store anyone's ssh login information and would use an SSL certificate to ensure optimum security. The idea would be that a user could create an account to save their settings if they want, but would be able to enter their server info without one and use it from anywhere. In addition I've thought about security a lot so implementing a rsa key pair as an option might help with that. In addition creating a blacklist of countries known for their extreme hacking and setting up a system to detect and block multiple failed login attempts. I'm also thinking about offering two versions: one with an advertisement on the bottom/side and a subscription based version without ads and extra features. In theory it could also make money by leasing licenses for the software it installs or provide links to various providers (through their affiliate program). Nothing invasive or irritating, just a friendly way to offer extra services and profit from it. I could also lease it out to hosting providers who would like to offer their clients an added bonus. The script installer sounds promising and I'm wondering if I can come up with an "app" for users on the desktop to manage their mysql database directly via something like phpmyadmin without having to install it or an autoinstaller/configuring agent for phpmyadmin. In reality the possibilities are limitless as to what kinds of enhancements can be made.