How to secure runcronjobs.php ?!

Author Message

Selmah Maxim

Wednesday 18 June 2003 6:50:52 am

Hi ..

I cann`t find more info about runcronjobs.php !
When you view it from browser will make all the unapproved items online, that mean the user can submit and make approve for all the Collaboration items !

Should i change the file name, or there are better way ?

thx.

Tony Wood

Thursday 19 June 2003 5:19:17 am

How is this possible? surly the apache rewrite rule will only allow index.php to be run?

Am I missing something?

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Saturday 21 June 2003 3:32:40 am

You right, i had forget the .htaccess file :)

And becoz i don`t wanna the url include index.php, i had remove it from FilesMatch tag, and write RewriteRule for runcronjobs.php !

This all testing on localhost, didn`t test it online, maybe i`ll meet another problem, or should i get virtual host ?!

Tony Wood

Saturday 21 June 2003 3:46:06 pm

If you can go virtual host. It works well.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 1:10:25 am

So ...

If am going to virtual host then i can stop the runcronjobs.php from the broweser via .htaccess.

Then each time I wanna check the workflows i need to login to the host and run from there, I think much better if i can be done from admin side !

Tony Wood

Sunday 22 June 2003 6:26:38 am

Try running them from an hourly/daily cron job. That way you don't have to give access to users for this.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 6:42:18 am

I know that, but what about if there is small module for admin which include 1 php cmd :

exec('php -C runcronjobs.php');

and this module is just for admin !

in this case no need to make cronjob, its will be costom, when admin need to check the submissions just click this link befor .. thats it !

what you think ?!

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 31 2025 00:26:36
Script start
Timing: Jan 31 2025 00:26:36
Module start 'layout'
Timing: Jan 31 2025 00:26:36
Module start 'content'
Timing: Jan 31 2025 00:26:36
Module end 'content'
Timing: Jan 31 2025 00:26:36
Script end

Main resources:

Total runtime0.0254 sec
Peak memory usage6,144.0000 KB
Database Queries3

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0052 588.1328151.2109
Module start 'layout' 0.00520.0041 739.3438220.6875
Module start 'content' 0.00940.0144 960.03131,005.8047
Module end 'content' 0.02370.0017 1,965.835937.9922
Script end 0.0254  2,003.8281 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.002911.2752140.0002
Check MTime0.00114.3120140.0001
Mysql Total
Database connection0.00083.154810.0008
Mysqli_queries0.00259.665030.0008
Looping result0.00000.059110.0000
Template Total0.00124.710.0012
Template load0.00093.712810.0009
Template processing0.00020.952810.0002
Override
Cache load0.00062.493610.0006
General
dbfile0.00114.479980.0001
String conversion0.00000.110740.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 1
 Number of unique templates used: 1

Time used to render debug report: 0.0001 secs