Re: [SMARTY] cache cron job
| From: | Mark Rogers | Date: | Wed, 19 Feb 2003 16:17:18 +0000 |
| Subject: | Re: [SMARTY] cache cron job | ||
| References: | 1 2 3 4 5 | Groups: | php.smarty.general |
| Request: | Send a blank email to php-smarty-general+get-7894@lists.php.net to get a copy of this message | ||
Paul Lockaby wrote:
> As Mark Rogers mentioned,
> I could have a PHP file that periodically gets run,
> but I'm timid to do that because that is just security
> by obscurity. What is to stop someone from
> abitrarily running that file?
As I described it there is nothing to stop anyone else running the script,
although it's not something which is really a security risk (although I
suppose it could be useful in a denial of service attack).
However, it is pretty trivial to restrict access to localhost, or to set up
security using htpasswd, or to set up an Apache VirtualHost which is only
accessible from localhost, etc.
I tend to use this approach as it is easy to test by viewing the page
manually, and since all my standard libraries and system
configuration/variables are available in the script. You are perfectly
correct that doing anything "significant" this way without some form of
security would be unwise, though.
Mark Rogers,
Quarella (More Solutions) Ltd
Tel: 0845 45 89 555