How to secure runcronjobs.php ?!

Author Message

Selmah Maxim

Wednesday 18 June 2003 6:50:52 am

Hi ..

I cann`t find more info about runcronjobs.php !
When you view it from browser will make all the unapproved items online, that mean the user can submit and make approve for all the Collaboration items !

Should i change the file name, or there are better way ?

thx.

Tony Wood

Thursday 19 June 2003 5:19:17 am

How is this possible? surly the apache rewrite rule will only allow index.php to be run?

Am I missing something?

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Saturday 21 June 2003 3:32:40 am

You right, i had forget the .htaccess file :)

And becoz i don`t wanna the url include index.php, i had remove it from FilesMatch tag, and write RewriteRule for runcronjobs.php !

This all testing on localhost, didn`t test it online, maybe i`ll meet another problem, or should i get virtual host ?!

Tony Wood

Saturday 21 June 2003 3:46:06 pm

If you can go virtual host. It works well.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 1:10:25 am

So ...

If am going to virtual host then i can stop the runcronjobs.php from the broweser via .htaccess.

Then each time I wanna check the workflows i need to login to the host and run from there, I think much better if i can be done from admin side !

Tony Wood

Sunday 22 June 2003 6:26:38 am

Try running them from an hourly/daily cron job. That way you don't have to give access to users for this.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 6:42:18 am

I know that, but what about if there is small module for admin which include 1 php cmd :

exec('php -C runcronjobs.php');

and this module is just for admin !

in this case no need to make cronjob, its will be costom, when admin need to check the submissions just click this link befor .. thats it !

what you think ?!

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.