Re: Cannot execute... Cron jobs
| From: | Paul Chvostek | Date: | Thu, 13 Mar 2003 05:47:28 +0000 |
| Subject: | Re: Cannot execute... Cron jobs | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-139442@lists.php.net to get a copy of this message | ||
Scott Holmes wrote:
> I'd just like to interject here that I execute php code from cron and
> I do not have php compiled as a cgi. I use lynx. Here is a sample of
> what I'm doing to e-mail a weekly newsletter to a membership database:
>
> #!/bin/sh
> LYNX_TEMP_SPACE=/tmp
> TMPDIR=/tmp
> TERM=vt100
> lynx -dump http://localhost/WFCC/mail_ltrs.php
On Thu, Mar 13, 2003 at 12:20:38AM -0500, Leif K-Brooks wrote:
>
> You can do that, but it's much less secure.
I'd love to know where you see the security problem. If Scott is
paranoid, he can run a separate instance of his web server that binds
only to 127.0.0.1, but even if the script is publically runable, it can
check HTTP_HOST and REMOTE_ADDR before doing anything critical. Scott
never mentioned the rest of his setup; judging its security is premature.
--
Paul Chvostek <paul@it.ca>
Operations / Abuse / Whatever
it.canada, hosting and development http://www.it.ca/