CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Send cron parameters via POST, not GET
Pages: [1]

Author Topic: Send cron parameters via POST, not GET  (Read 799 times)

robertjd

  • I’m new here
  • *
  • Posts: 14
  • Karma: 0
Send cron parameters via POST, not GET
November 18, 2009, 11:02:10 am
Requesting the cron page(s) with a GET request is insecure.  This causes the name and password parameters to appear in web server logs.  You should send the params via POST with wget:


wget -O - -q -t 1  --post-data="name=mailuser&pass=mailuser&key=1234" http://www.example.org/sites/all/modules/civicrm/bin/civimail.cronjob.php

Dave Greenberg

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 5760
  • Karma: 226
    • My CiviCRM Blog
Re: Send cron parameters via POST, not GET
November 20, 2009, 09:29:30 am
Hi Robert - Might be good to update this wiki page with a {tip} :-)
http://wiki.civicrm.org/confluence/display/CRMDOC/Command-line+Script+Configuration
Protect your investment in CiviCRM by  becoming a Member!
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Send cron parameters via POST, not GET

This forum was archived on 2017-11-26.