确保PHP脚本只作为cron作业运行？

Question

如何确保用户无法运行PHP脚本，并且只能作为cron作业的一部分运行？

Answer 1

You can set an environment variable in your crontab. A line like IS_CRON=1 can be placed at the beginning of your crontab, then check in your php program for get_env("IS_CRON") == 1 .

Of course, you should also use file permissions as they're not so easily bypassed. If this is run as part of root's cron, chown root:root yourscript.php and chown 700 yourscript.php .

---

As ircmaxell says, it'd be better to run as a user other than root assuming you don't need root permissions for what you're doing. I was just taking a guess about your setup.

Answer 2

让PHP脚本检查$_SERVER['REMOTE_ADDR']是否为空，如果不是，那么让脚本退出而不做任何进一步的操作。

Answer 3

There are probably a number of ways to do this. Off the top of my head, I would say that placing it in a directory owned by root, and only readable by root might get close to achieving the effect you are looking for.

Are there any processes you are looking specifically to restrict it from? If so, using permissions, make it not readable to any of those processes.

Answer 4

我建议在crontab中设置一个环境变量，然后在PHP脚本中检查它

Answer 5

Create a user for cron jobs, and set permissions of the script so it can only be run as this user. Of course you then need to put the script in that user's crontab , which you can do by logging in as that user and running crontab . Just don't give that user's password to just any other user...

At first I was also thinking of setting an environment variable which would prevent running this script from the web... But just not putting the script in the space where the web server looks for pages for websites, would do the same.

And nothing is stopping a random user from first setting the environment variable and then running the script.