Forums / Developer / How to secure runcronjobs.php ?!

"Please Note:
  • At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
  • This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

How to secure runcronjobs.php ?!

Author Message

Selmah Maxim

Wednesday 18 June 2003 6:50:52 am

Hi ..

I cann`t find more info about runcronjobs.php !
When you view it from browser will make all the unapproved items online, that mean the user can submit and make approve for all the Collaboration items !

Should i change the file name, or there are better way ?

thx.

Tony Wood

Thursday 19 June 2003 5:19:17 am

How is this possible? surly the apache rewrite rule will only allow index.php to be run?

Am I missing something?

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Saturday 21 June 2003 3:32:40 am

You right, i had forget the .htaccess file :)

And becoz i don`t wanna the url include index.php, i had remove it from FilesMatch tag, and write RewriteRule for runcronjobs.php !

This all testing on localhost, didn`t test it online, maybe i`ll meet another problem, or should i get virtual host ?!

Tony Wood

Saturday 21 June 2003 3:46:06 pm

If you can go virtual host. It works well.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 1:10:25 am

So ...

If am going to virtual host then i can stop the runcronjobs.php from the broweser via .htaccess.

Then each time I wanna check the workflows i need to login to the host and run from there, I think much better if i can be done from admin side !

Tony Wood

Sunday 22 June 2003 6:26:38 am

Try running them from an hourly/daily cron job. That way you don't have to give access to users for this.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Sunday 22 June 2003 6:42:18 am

I know that, but what about if there is small module for admin which include 1 php cmd :

exec('php -C runcronjobs.php');

and this module is just for admin !

in this case no need to make cronjob, its will be costom, when admin need to check the submissions just click this link befor .. thats it !

what you think ?!