Auto-Run Scripts

[drag0n]

I have a few scripts which I am running using cron_jobs. Currently I am on a windows server... but how can I modify the permissions so that nobody can access the files through a browser...? I want it so that it can only be access by the server. Whats the best way to do this? Should I modify the permissions or can I use the same type of code that I am using to check whether a file is included or ran as stand-alone?
Thanks

[jmack159]

put the files below the web root

[faifas]

Or if you can't (or don't know how to) move your files, you can do a tricky thing.
Something like if your cron file is omg.php, edit it to omg.php?sPass=secretcronpass
And then check if passwords match in your files, like:

<?
//this is omg.php
if($_GET['sPass']!='secretcronpass') exit('Type here anything or leave it ^_^');
?>

[bradgrafelman]

faifas wrote:

edit it to omg.php?sPass=secretcronpass

Except that probably won't work, since it's probably running via the CLI.

In that case, you'll just add it as a parameter (e.g. "php_cli.exe -f myscript.php secretpass") and check for it via $argv[1].

[drag0n]

Thanks guys. I was thinking about using a GET variable to check if its from the cron; but I was worried that it wouldbe interceptable by anyone on the server. So no one else will be able to see what page/URL the CRON job is going right?

Thanks

[bradgrafelman]

drag0n wrote:

So no one else will be able to see what page/URL the CRON job is going right?

Only those who have access to the Scheduled Tasks folder on the server (or read access to the .php script itself).