PHP计划任务安全性

Question

To piggyback off of this article, How to schedule the execution of a PHP script on the server side? , what concerns should I have for the user account that is selected to run the script?

For example, if I use the administrator account and I need to change the password of the administrator account, what happens to my scripts? Is there a way to have the scripts run on Windows and not have to worry about user account password changes? Are there other security concerns by running PHP scripts in this manner that I need to be aware of?

Is there a way to make it run on the local system without needing to be an admin user and call php?

Answer 1

Typically scheduled tasks with work if a password is updated, as it links into the user account.

However, its not a good idea to create tasks under random users, rule of thumb is typically organize / create users specifically for a scheduled task. I know internally for domain accounts, we (at my company) have specific accounts that we use for backups, others for scheduled tasks, etc.

That way you separate logic and security layer (backup user isn't full admin, nor is a task running user capable of say touching databases, etc;)