Re: Cronjob security

From: Date: Tue, 04 Jun 2002 04:15:39 +0000
Subject: Re: Cronjob security
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-100509@lists.php.net to get a copy of this message
Sire: On Mon, Jun 03, 2002 at 11:47:50PM -0400, Edgard Berendsen wrote: > I'm using the following cronjob in my remote server: > > MAILTO="myname@mail.com" > 0 0 * * * wget -Ofile.log -q -T10 > http://www.domain.com/script.php /dev/null > > This is the only way I can run a cronjob successfully... If you don't have PHP as a stand alone binary, that's right. >... but I've read it is un-secure. Is this true? Depends. What happens if I go to that URI and try to run the script? If it would cause problems, then yes, it's insecure. If it doesn't matter, than no, it's not. So, what would happen if I hit your script with my web browser? --Dan -- PHP classes that make web design easier SQL Solution | Layout Solution | Form Solution sqlsolution.info | layoutsolution.info | formsolution.info T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y 4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409

« previous php.general (#100509) next »