mahara-contributors team mailing list archive

[Kristina Hoeppner <1451636@xxxxxxxxxxxxxxxxxx>]

** Changed in: mahara
       Status: In Progress => Fix Committed

** Tags added: nominatedfeature

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1451636

Title:
  Have the cron and/or upgrade site only run if they are accompanied
  with secret in url

Status in Mahara:
  Fix Committed

Bug description:
  Set up a basic secret in config.php like $cfg->urlsecret =
  'bunnyslippers';

  So that if a user hits /admin/upgrade.php or /lib/cron.php they need
  to add the ?secret=bunnyslippers to the end of the url or it won't
  run.

  This will stop random people hitting those urls and causing potential
  problems during db upgrade / normal cron runs

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1451636/+subscriptions