Question

Is it OK to give full authorization to any request coming from the command line?

My idea was to make this check:

if(isset($_SERVER['argc']) AND $_SERVER['argc']>=2) {
    // it must be the admin, give him full authorization, no further checks needed.
} else {
    // normal web request, authentication needed.
}

Does this make sense?

Anything else I should know before I start using the command line to execute my php scripts?

Answer 1

It’s only safe if the server has only one user. Otherwise you need to either:

• Check for the correct user ID in the script
• Make the script only executable for that user

(This is assuming a Linux server)