Re: [SMARTY] cache cron job

From: Date: Wed, 19 Feb 2003 16:17:18 +0000
Subject: Re: [SMARTY] cache cron job
References: 1 2 3 4 5  Groups: php.smarty.general 
Request: Send a blank email to php-smarty-general+get-7894@lists.php.net to get a copy of this message
Paul Lockaby wrote: > As Mark Rogers mentioned, > I could have a PHP file that periodically gets run, > but I'm timid to do that because that is just security > by obscurity. What is to stop someone from > abitrarily running that file? As I described it there is nothing to stop anyone else running the script, although it's not something which is really a security risk (although I suppose it could be useful in a denial of service attack). However, it is pretty trivial to restrict access to localhost, or to set up security using htpasswd, or to set up an Apache VirtualHost which is only accessible from localhost, etc. I tend to use this approach as it is easy to test by viewing the page manually, and since all my standard libraries and system configuration/variables are available in the script. You are perfectly correct that doing anything "significant" this way without some form of security would be unwise, though. Mark Rogers, Quarella (More Solutions) Ltd Tel: 0845 45 89 555

« previous php.smarty.general (#7894) next »