使用PHP Desktop执行多.bat/.exe文件及JS触发执行的可行性问询

Hey there! Great questions—let’s break them down one by one:

1. Can the main .exe run multiple .bat/.exe files after launching? #

Absolutely! PHP Desktop is built on Chromium Embedded Framework (CEF) and integrates full PHP functionality, so you can leverage PHP’s built-in process functions to spawn multiple external programs.

You’ve got a few flexible options depending on your needs:

• exec(): Runs a command and returns the last line of output—ideal if you need to capture a quick result.
• shell_exec(): Executes a command and returns the full output as a string.
• passthru(): Sends command output directly to the browser in real-time, useful for long-running scripts.
• proc_open(): Gives you granular control over the process (like managing input/output streams or running processes in the background).

Here’s a quick example of running multiple external files in PHP:

// Run first batch file in the background (no new cmd window)
exec('start /B first_script.bat');

// Launch a standalone executable
shell_exec('second_app.exe');

// Run third batch file and capture its output
$output = shell_exec('third_script.bat');
echo "<pre>$output</pre>";

A couple of quick tips:

• Always use absolute paths for your .bat/.exe files if they’re not in the same folder as your PHP Desktop app to avoid path errors.
• Use start /B for batch files if you don’t want command prompt windows popping up during execution.

2. Can JavaScript button clicks trigger .bat/.exe execution? #

Yep, you can absolutely tie a button click to running external files—here are two reliable approaches:

Approach 1: AJAX Call to a PHP Script #

This uses standard web technologies that PHP Desktop supports seamlessly, and it’s easy to secure.

First, create a PHP script (e.g., run_external.php) to handle the execution:

<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $commandKey = $_POST['command'];
    // Critical: Whitelist allowed commands to avoid security risks
    $allowedCommands = [
        'backup' => 'start /B backup_script.bat',
        'launch_tool' => 'system_tool.exe'
    ];

    if (isset($allowedCommands[$commandKey])) {
        exec($allowedCommands[$commandKey]);
        echo "Command executed successfully!";
    } else {
        echo "Invalid command request!";
    }
}
?>

Then add a button and JavaScript to trigger the AJAX request:

<button id="runBackupBtn">Run Backup</button>

<script>
document.getElementById('runBackupBtn').addEventListener('click', () => {
    fetch('run_external.php', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
        },
        body: 'command=backup'
    })
    .then(res => res.text())
    .then(msg => alert(msg))
    .catch(err => console.error('Error:', err));
});
</script>

Approach 2: Use PHP Desktop’s Native JS API #

PHP Desktop includes a native window.phpdesktop object that lets you run commands directly from JavaScript, no PHP middleman required.

First, double-check your settings.json has this enabled (it’s usually on by default):

"allow_executable_launch": true

Then use the exec() method in your JavaScript:

<button id="directLaunchBtn">Launch System Tool</button>

<script>
document.getElementById('directLaunchBtn').addEventListener('click', () => {
    // Run a batch file in the background
    window.phpdesktop.exec('start /B backup_script.bat');
    // Or launch an executable directly
    // window.phpdesktop.exec('system_tool.exe');
    alert("Command triggered!");
});
</script>

Critical Security Note: Never execute arbitrary user input as a command—always whitelist allowed actions or paths to prevent malicious code execution.

内容的提问来源于stack exchange，提问作者Toli2017