Scott Holmes wrote: > I'd just like to interject here that I execute php code from cron and > I do not have php compiled as a cgi. I use lynx. Here is a sample of > what I'm doing to e-mail a weekly newsletter to a membership database: > > #!/bin/sh > LYNX_TEMP_SPACE=/tmp > TMPDIR=/tmp > TERM=vt100 > lynx -dump http://localhost/WFCC/mail_ltrs.php
On Thu, Mar 13, 2003 at 12:20:38AM -0500, Leif K-Brooks wrote: > > You can do that, but it's much less secure. I'd love to know where you see the security problem. If Scott is paranoid, he can run a separate instance of his web server that binds only to 127.0.0.1, but even if the script is publically runable, it can check HTTP_HOST and REMOTE_ADDR before doing anything critical. Scott never mentioned the rest of his setup; judging its security is premature. -- Paul Chvostek <[EMAIL PROTECTED]> Operations / Abuse / Whatever it.canada, hosting and development http://www.it.ca/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php