Page 1 of 1

CRONTAB for Hash

Posted: Fri Oct 01, 2010 2:38 am
by rickstr
Script URL:
Version of script: 1.7
Hosting company: superwebhost.com
URL of phpinfo.php:
URL of session_test.php:
What terms did you try when SEARCHING for a solution:
CRON, CRONTAB, Auto,
Write your message below:

I am having problems with people putting up a link on a page and then submitting a link only to have the link to my site removed after it is MANUALLY approved. The person posting the link apparently was able to click an approve link that was accidentally sent in a reply by a support letter to the individuals.

This could be perhaps partly solved by having the hash (random alphanumeric string) in "settings.php" changed every time links.php is opened OR by a CRON event. I guess the former could be done by copying some functions from "admin.php" into "links.php" to be run at each opening and rewriting "settings.php". The CRON is IMHO cleaner but harder to implement. But I may try to do it. Does anyone have any other ideas or suggestions?

Rick

Re: CRONTAB for Hash

Posted: Fri Oct 01, 2010 12:39 pm
by Klemen
The link for manual approval is sent to the admin only - I don't understand how the person submitting it got his/her hands on it?

Also the persons ubmitting the link has no way of knowing what your hash in the settings is, even if he/she does get his/her hands on the approval link.

Re: CRONTAB for Hash

Posted: Fri Oct 01, 2010 5:47 pm
by rickstr
As I said the link AND hash was inadvertently sent to the person trying to register. So... the hash was the same since settings.php had not been accessed. He therefore was able to activate his own account. This is the reason I mayexperiment with an alternative method of generating the hash code.

Re: CRONTAB for Hash

Posted: Sat Oct 02, 2010 6:55 pm
by Klemen
Since you (hopefully :wink: ) won't be sending the has every time all you need to do is go to the admin panel to the Settings page and click the save settings button - this will generate a new hash.

Re: CRONTAB for Hash

Posted: Sat Oct 02, 2010 8:52 pm
by rickstr
Yep... This is why I may make a CRONTAB event or have it regenerated each time "links.php" is viewed. The latter would be sort of a pseudo-CRONTAB.