The free forums are no longer in use. It remains available as read-only archive.
Log In
12:00 am
Hi,
How I can be safe that the cron url is not done by an hacker?
http://domain/admini.....r.cron.php could be accessed by a third party and then information about the name of the backup and the place for download is given. If I am setting a .htaccess the component in the backend asks also for the password. Can I move the cloner.cron.php into another subdirectory, which I can secure by an .htaccess?
Best wishes
Eric
12:00 am
Hi there! First of all you need to know that in the last version of JoomlaCloner 1.9.0 we have added some security protocols for the cron script, so it is only accessible from inside your server(when your server runs the cron automatically) and any ip you allow the access to from the JoomlaCloner backend!
So, for example, if somebody from ip xx.xx.xx.xx is trying to access the cron script, and they are not in the allowed ip's list they won't be able to generate a backup or access anything else further than the access denied message!
Second to that, we have published in our FAQ here http://www.joomlaplu.....e,1/#FAQ13 a secure way to protect your backend access by restricting it only to your ip "How do I secure JoomlaCloner and the backups?" item!
Also, if you move the cron script from it's default location, it won't work unless you adjust some paths in it's code, so the best way to secure it is to first upgrade to the latest JoomlaCloner version so you get the build in ip protection, and also create the .htaccess protection as indicated in our FAQ.
Let me know if you have further questions!
Ovidiu
All RSS1 Guest(s)
