** Changed in: mahara
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1451636
Title:
Have the cron and/or upgrade site only run if they are accompanied
with secret in url
Status in Mahara:
Fix Released
Bug description:
Set up a basic secret in config.php like $cfg->urlsecret =
'bunnyslippers';
So that if a user hits /admin/upgrade.php or /lib/cron.php they need
to add the ?secret=bunnyslippers to the end of the url or it won't
run.
This will stop random people hitting those urls and causing potential
problems during db upgrade / normal cron runs
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1451636/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : [email protected]
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
