CiviCRM Community Forums (archive)

I happened to look at the email header for a Membership Renewal Reminder email sent through the UpdateMembershipRecord.php cron job.  If you follow the instructions at http://wiki.civicrm.org/confluence/display/CRMDOC33/Membership+Types, then the entire cron job command line is contained in the email's raw header, including username, password and sitekey.  Here is what I am seeing as part of the email header:

X-SG-Opt:  SCRIPT_FILENAME=/home/XXXXX/public_html/administrator/components/com_civicrm/civicrm/bin/UpdateMembershipRecord.php REQUEST_URI=/administrator/components/com_civicrm/civicrm/bin/UpdateMembershipRecord.php?%20name=XXXXX&pass=XXXXXX&key=XXXXXXXXXXXXXXXXXXXXX PWD=/home/XXXXX/public_html/administrator/components/com_civicrm/civicrm/bin
I have replaced the confidential info with X's.  I don't know if this is typical email-header behavior or something unique to my shared hosting service (Siteground).

I am sure that people more experienced in cron jobs already know this, but I wanted to tell the newbies out there that it is probably better to use the "--post-data' approach described at http://wiki.civicrm.org/confluence/display/CRMDOC33/CiviMail+Installation for all cron job's requiring confidential info (it is currently described only for civimail.chronjob.php).  Once I changed the cron command line to use the "post-data" approach, the same part of the email header changed to:
X-Sg-Opt: SCRIPT_FILENAME=/home/XXXXX/public_html/administrator/components/com_civicrm/civicrm/bin/UpdateMembershipRecord.php  REQUEST_URI=/administrator/components/com_civicrm/civicrm/bin/UpdateMembershipRecord.php  PWD=/home/XXXXX/public_html/administrator/components/com_civicrm/civicrm/bin
If I am misunderstanding the documentation for UpdateMembershipRecord.php, please let me know.  Otherwise, it might be a good idea to change the documentation on this.