PHP & cron: security issues

cron, php, security

Solution

You should keep this file outside of public_html

/usr/local/bin/php -f /home/mysite/script 
// is secure from public access

Problem

Whats the best way to ensure that only CRON executes PHP scripts, and not someone else who stumbled upon your php scripts.. I was thinking a Password Variable.... but is this a legal CRON command? : ``` /usr/local/bin/php -f /home/mysite/public_html/dir/script?password=12345 ``` This way people cannot be able to execute the same commands when visiting the PHP script via HTTP (unless they know the password) Thanks.

Original source