RE: [PHP] Using php as a scripting language within cron jobs?

From: Date: Fri, 17 May 2002 13:37:07 +0000
Subject: RE: [PHP] Using php as a scripting language within cron jobs?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-98080@lists.php.net to get a copy of this message
> from the cron I would call this command... > > wget -q -T10 http:/www.mydomain.com/myScript.php -0 /dev/null > > I have never had a problem with this method, although I am sure it has > a higher overhead than compiling as a binary and directly calling php. This method (again) is insecure in the extreme... please see my other responses to this for further details but basically, the following stand: 1. The script is executed as the web process 2. The web process has to be running 3. The script is accessable from the web This makes it highly insecure as anyone could execute it (unless you locked it down which is silly when you could just run it locally yourself). Also the data is going over HTTP which would easily be intercepted with ethereal / tcpdump etc. I still *strongly* recommend compiling a binary if only for purely security based precautionary reasons. -- Dan Hardiker [dhardiker@staff.firstcreative.net] ADAM Software & Systems Engineer

« previous php.general (#98080) next »