Just run your sshd on one of the ports commonly used for web servers. Your school probably allows port 8080 for instance. Using CGI for administration isn't generally advisable.

-sauoq
"My two cents aren't worth a dime.";

There lies untold security issues just waiting to be found by some malicious hacker! If you really need to remotely administer your machines, first look for existing software written by people who have tackled this with an eye towards proper security.

If you really want to go ahead with this, it would be easier to help you if you would post some code.

If you must go the CGI route, webmin is a pretty complete solution and it's all perl.

--
જલધર

If you want a solution like ssh which needs to run through an http proxy then the suggestion of just putting an ssh server on a webby port probably won't help, because the proxy will try to parse ssh and get horribly confused.

Instead, you need to wrap the ssh protocol in http. You want to use httptunnel, which lets you wrap *any* protocol in http. No need to use https of course, because while the wrapper might be plain-text, the ssh packets encapsulated therein are still nicely opaque.

httptunnel can be downloaded from here.

This is about as basic as you can get. You get a textbox to type commands into and a run button. Output goes to browser. Probably needs a little work on the security side ;-)

The practical problem you face is that Apache will be running as user nobody or apache (ie not you) so you will be limited in what you can do. There are of course solutions to this problem.

#!/usr/bin/perl
$|++;
use CGI qw( :standard );
use CGI::Carp qw( fatalsToBrowser );
my $command = param('command'); 
print header, start_form({ -method=>'get' }), textfield({-size=>75,-na
+me=>'command'}), 
    submit('Run'), end_form;
if ($command) {
  open( CMD, "$command 2>&1|" ) or die "$!: running command: '$command
+'";
  print "<pre>";
  print escapeHTML($_,1) while<CMD>;
  print "</pre>\n", end_html;
  close CMD;
}
[download]

cheers

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print

From school to your computer at home?
Go for it in any way you wish, assuming you are willing to risk it.

From outside INTO school (an obviously protected zone).
1) read your handbook, check the rules - you may forfeit more than you know by experimenting.
2) as otherwise advised - check with IT (not a buddy in that area, but the SCHOOL security employee)

Sometimes it is easier to ask for forgiveness than to ask permission.

Forgiveness is not guaranteed

dageek

...neither is permission. hence why one would ask for and expect neither...

Well, the proxy (and probably some firewalls too) are there for a reason. Could it be that they wish to avoid remote access to your or any other computer on their network?

I would suggest you speak to the head of IT, explain your problem and ask for an *approved* solution.

CountZero

"If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law