Q:

Can I protect my CRON scripts from remote users?

I am currently working on a new project which involves using CRON jobs.
The CRON script basically runs an SQL query, generates the data into a file, and send that file to another server via FTP.
The script is on a live website (www.website.com/sendOrders.php)
I don't see any security issues or threats, and I think it is highly unlikely that anyone will find the PHP script on the server. However I don't want the script to be executed by any outsiders.
Is there a way I can protect this script?
Thanks
Peter

A:

You could move your "secret files" into a subfolder, then create a .htaccess file in there that prevents access to that file from everyone, except the server that is running the Cronjob.
Example:
DENY FROM ALL
ALLOW FROM 123.123.123.123

If you have shell access you might also put the scripts outside of the accessible folder and run directly via command line or cronjob like this: php script.php.

A:

Why not just move the script outside the Web-root of the server and execute it from CLI? This was there is no chance of anyone else executing it. 
If you must have it in the webroot (and there should be no reason for it), just make sure that the client for the request is the server you are running it on, and it should be more than enough.

