summaryrefslogtreecommitdiff
path: root/INSTALL.txt
diff options
context:
space:
mode:
authorDries Buytaert <dries@buytaert.net>2008-03-17 16:53:58 +0000
committerDries Buytaert <dries@buytaert.net>2008-03-17 16:53:58 +0000
commit45097b78b7ff86e2d5ecd53d9926204d52c87955 (patch)
tree57fdb6b07f08dfce2bd220ff4452b729704043dd /INSTALL.txt
parent2e2c2bcac0ee76a081242ab8124c102fd4bda72b (diff)
downloadbrdo-45097b78b7ff86e2d5ecd53d9926204d52c87955.tar.gz
brdo-45097b78b7ff86e2d5ecd53d9926204d52c87955.tar.bz2
- Patch #52910 by kbahey, keith.smith, Susurrus, et al: restict access to cron.php.
Diffstat (limited to 'INSTALL.txt')
-rw-r--r--INSTALL.txt30
1 files changed, 20 insertions, 10 deletions
diff --git a/INSTALL.txt b/INSTALL.txt
index a15786c95..93a627ce0 100644
--- a/INSTALL.txt
+++ b/INSTALL.txt
@@ -207,20 +207,30 @@ INSTALLATION
maintenance task, including search module (to build and update the index
used for keyword searching), aggregator module (to retrieve feeds from other
sites), and system module (to perform routine maintenance and pruning on
- system tables).
- To activate these tasks, call the cron page by visiting
- http://www.example.com/cron.php, which, in turn, executes tasks on behalf
- of installed modules.
+ system tables). To activate these tasks, visit the page "cron.php", which
+ executes maintenance tasks on behalf of installed modules. The URL of the
+ cron.php page requires a "cron key" to protect against unauthorized access.
+ Each cron key is automatically generated during installation and is specific
+ to your site. The full URL of the page, with cron key, is available in the
+ "Cron maintenance tasks" section of the "Status report page" at:
- Most systems support the crontab utility for scheduling tasks like this. The
- following example crontab line will activate the cron tasks automatically on
- the hour:
+ Administer > Reports > Status report
- 0 * * * * wget -O - -q -t 1 http://www.example.com/cron.php
+ Most systems support using a crontab utility for automatically executing
+ tasks like visiting the cron.php page. The following example crontab line
+ uses wget to automatically visit the cron.php page each hour, on the hour:
+
+ 0 * * * * wget -O - -q -t 1 http://www.example.com/cron.php?cron_key=RANDOMTEXT
+
+ Replace the text "http://www.example.com/cron.php?cron_key=RANDOMTEXT" in the
+ example with the full URL displayed under "Cron maintenance tasks" on the
+ "Status report" page.
More information about cron maintenance tasks are available in the help pages
- and in Drupal's online handbook at http://drupal.org/cron. Example scripts can
- be found in the scripts/ directory.
+ and in Drupal's online handbook at http://drupal.org/cron. Example cron scripts
+ can be found in the scripts/ directory. (Note that these scripts must be
+ customized similar to the above example, to add your site-specific cron key
+ and domain name.)
DRUPAL ADMINISTRATION
---------------------