Re: Cronjob security
| From: | Analysis & Solutions | Date: | Tue, 04 Jun 2002 04:15:39 +0000 |
| Subject: | Re: Cronjob security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-100509@lists.php.net to get a copy of this message | ||
Sire:
On Mon, Jun 03, 2002 at 11:47:50PM -0400, Edgard Berendsen wrote:
> I'm using the following cronjob in my remote server:
>
> MAILTO="myname@mail.com"
> 0 0 * * * wget -Ofile.log -q -T10
> http://www.domain.com/script.php /dev/null
>
> This is the only way I can run a cronjob successfully...
If you don't have PHP as a stand alone binary, that's right.
>... but I've read it is un-secure. Is this true?
Depends. What happens if I go to that URI and try to run the script?
If it would cause problems, then yes, it's insecure. If it doesn't
matter, than no, it's not. So, what would happen if I hit your script
with my web browser?
--Dan
--
PHP classes that make web design easier
SQL Solution | Layout Solution | Form Solution
sqlsolution.info | layoutsolution.info | formsolution.info
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409