CRONTAB for Hash

Problems installing LinkMan?
Post Reply
rickstr
Posts: 4
Joined: Fri Oct 01, 2010 1:19 am

CRONTAB for Hash

Post by rickstr »

Script URL:
Version of script: 1.7
Hosting company: superwebhost.com
URL of phpinfo.php:
URL of session_test.php:
What terms did you try when SEARCHING for a solution:
CRON, CRONTAB, Auto,
Write your message below:

I am having problems with people putting up a link on a page and then submitting a link only to have the link to my site removed after it is MANUALLY approved. The person posting the link apparently was able to click an approve link that was accidentally sent in a reply by a support letter to the individuals.

This could be perhaps partly solved by having the hash (random alphanumeric string) in "settings.php" changed every time links.php is opened OR by a CRON event. I guess the former could be done by copying some functions from "admin.php" into "links.php" to be run at each opening and rewriting "settings.php". The CRON is IMHO cleaner but harder to implement. But I may try to do it. Does anyone have any other ideas or suggestions?

Rick
Klemen
Site Admin
Posts: 10116
Joined: Fri Feb 11, 2005 4:04 pm

Re: CRONTAB for Hash

Post by Klemen »

The link for manual approval is sent to the admin only - I don't understand how the person submitting it got his/her hands on it?

Also the persons ubmitting the link has no way of knowing what your hash in the settings is, even if he/she does get his/her hands on the approval link.
Klemen, creator of HESK and PHPJunkyardWas this helpful? You can buy me a drink here Image

Image You should follow me on Twitter here

Help desk software | Cloud help desk | Guestbook | Link manager | Click counter | more PHP Scripts ...

Also browse for php hosting companies, read php books, find php resources and use webmaster tools
rickstr
Posts: 4
Joined: Fri Oct 01, 2010 1:19 am

Re: CRONTAB for Hash

Post by rickstr »

As I said the link AND hash was inadvertently sent to the person trying to register. So... the hash was the same since settings.php had not been accessed. He therefore was able to activate his own account. This is the reason I mayexperiment with an alternative method of generating the hash code.
Klemen
Site Admin
Posts: 10116
Joined: Fri Feb 11, 2005 4:04 pm

Re: CRONTAB for Hash

Post by Klemen »

Since you (hopefully :wink: ) won't be sending the has every time all you need to do is go to the admin panel to the Settings page and click the save settings button - this will generate a new hash.
Klemen, creator of HESK and PHPJunkyardWas this helpful? You can buy me a drink here Image

Image You should follow me on Twitter here

Help desk software | Cloud help desk | Guestbook | Link manager | Click counter | more PHP Scripts ...

Also browse for php hosting companies, read php books, find php resources and use webmaster tools
rickstr
Posts: 4
Joined: Fri Oct 01, 2010 1:19 am

Re: CRONTAB for Hash

Post by rickstr »

Yep... This is why I may make a CRONTAB event or have it regenerated each time "links.php" is viewed. The latter would be sort of a pseudo-CRONTAB.
Post Reply