Skip to content
This repository was archived by the owner on Nov 19, 2024. It is now read-only.
This repository was archived by the owner on Nov 19, 2024. It is now read-only.

Securing cron.php is misleading or not sufficiently explained #875

Closed
@pantaoran

Description

@pantaoran

On this page there is the following documentation:

Step 2: Modify the nginx configuration

Add the following to your nginx.conf:

location cron\.php {
    auth_basic "Cron Authentication";
    auth_basic_user_file <path to password file>;
} 

Restart nginx and continue with the next section.

This is not clear at all. If I follow this literally, what happens is that every time I point my browser to cron.php it will attempt to download that file rather than executing it.

Could you please expand that to include the fact that that block still needs lots of additional lines to work with php-fpm? I had to duplicate many lines from the location block below to get this to work.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions