[NOT A BUG] Pipe cron output

[jdk]

If someone goes to xxxxxxx.com/billing/pipe/pop.php it will display on the screen what has been imported.

[Matt]

No it doesn't, it only displays your email addresses and the number of emails that were imported, NOT what has been imported. You can rename the pipe folder if you're concerned but it's not divulging anything secret.

 

Matt

[ChrisGooding]

This be prevented with file permissions, or user access.

 

If you run the cron as a specific user, then that is the only user that needs permissions to read the file.

 

Simply add a rule in that prevents all other users apart from that one from viewing the file. It could be done either as a file permission, or by placing a .htaccess file in the pipe directory with the rule in.

 

That should do it.

[bgsebiosjr]

Please give an example how to use .httaccess

This be prevented with file permissions, or user access.

 

If you run the cron as a specific user, then that is the only user that needs permissions to read the file.

 

Simply add a rule in that prevents all other users apart from that one from viewing the file. It could be done either as a file permission, or by placing a .htaccess file in the pipe directory with the rule in.

 

That should do it.