Scott Holmes wrote:
> I'd just like to interject here that I execute php code from cron and 
> I do not have php compiled as a cgi.  I use lynx.  Here is a sample of 
> what I'm doing to e-mail a weekly newsletter to a membership database:
>
> #!/bin/sh
> LYNX_TEMP_SPACE=/tmp
> TMPDIR=/tmp
> TERM=vt100
> lynx -dump http://localhost/WFCC/mail_ltrs.php

On Thu, Mar 13, 2003 at 12:20:38AM -0500, Leif K-Brooks wrote:
> 
> You can do that, but it's much less secure.

I'd love to know where you see the security problem.  If Scott is
paranoid, he can run a separate instance of his web server that binds
only to 127.0.0.1, but even if the script is publically runable, it can
check HTTP_HOST and REMOTE_ADDR before doing anything critical.  Scott
never mentioned the rest of his setup; judging its security is premature.

-- 
  Paul Chvostek                                             <[EMAIL PROTECTED]>
  Operations / Abuse / Whatever
  it.canada, hosting and development                   http://www.it.ca/


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to