Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I would like to deverlop one web application, enduser can configure shutdown computer when task has completed, i have search via internet but i have nothing to complete that.

Web browser can understand javascript, css and html. i have searched with javascipt(Is it possible to shut down somebody's computer from a website) and the answer is can not. Silverlight and Flash can not too.

So if browser support that function, does it make some risks ?

Thank for any suggestion !

share|improve this question
3  
Duplicate of stackoverflow.com/questions/16227736/… –  Hammo Apr 26 '13 at 2:30
    
I don't understand why i get negative votes(Both Stackoverflow and this site), i just would like to deverlop scheduler webapp. –  Rong Nguyen Apr 26 '13 at 3:33
    
This is off topic here. But even if it was on topic it would still get down votes as it is not a well structured question - if you read the faq here or the one on SO you will get guidance on how to ask a question. –  Rory Alsop Apr 26 '13 at 7:18
add comment

closed as off topic by Rory Alsop Apr 26 '13 at 7:17

Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers

up vote 3 down vote accepted

If this will be with end user consent, then the easiest would be to write a simple service per each operating system that your clients will use, pack them as convenient installation executables, and host on your web server.

For example on Windows systems, all that service/application would have to do is to start at system boot, listen on some preset port that isn't firewalled, and wait for the server's authentication and shutdown request. Once the request is authenticated in some way that you consider sufficiently secure (browse tag for more information), call the ExitWindowsEx Windows API function (see link for input parameters documentation).

Of course, users will have to give their consent to run the executable, and depending on a network port used, possibly to disable firewall and enable it to communicate with WAN too.

Similar can be achieved for other operating systems as well, if that's even a requirement.

share|improve this answer
    
Thank for your attention ! –  Rong Nguyen Apr 26 '13 at 3:26
add comment

I think what your looking for is something like these HP iLO and Dell Drac This way you can not only power off, but you can reboot/turn on/etc computers from a web console (also serial and other protocols).

These are generally speaking, safe. Vulnerabilities crop up from time to time but nothing major recently as far as i'm aware. The obvious risks, if someone gets in is the ability of someone to be able to shutdown your machines at will and potentially cause real hardware damage to your machine.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.