By zigma on

It appears anyone can call www.example.com/cron.php for a drupal website.

I guess anyone visiting the site can visit this link and result in manual execution of cron. We maynot want this to run at anytime.

Is there anyway to secure this?

⋅ Categories: Drupal 6.x

Comments

cog.rusty’s picture

cog.rusty commented

Yes. See http://drupal.org/cron "Security notes", Deny from all, Allow from ... etc.