Announcement

Collapse
No announcement yet.

Simulate admin login process?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Simulate admin login process?

    Is there a way to simulate the admin login to process the provision file, provide.xml? Was hoping for a API, http POST or web service call. I'm posting many small updates a day to the Miva V9 ready theme site, but really can't do that very efficiently if you have to login to the admin panel just to process the updates.

    Thanks hoping for another way.
    Thank You,
    Rick Scofield -

    #2
    If it's named pre-provide.xml it should get processed with just a request to the admin.mvc from a cron job.
    David Hubbard
    CIO
    Miva
    [email protected]
    http://www.miva.com

    Comment


      #3
      Thank you for the recommendation. When I figure out the correct command line to use, I'll post it back here. Also, ir looks like from your response you just need to make a login request to admin.mvc without any user & password information, correct?

      Thanks again
      Thank You,
      Rick Scofield -

      Comment


        #4
        Originally posted by rscof View Post
        Thank you for the recommendation. When I figure out the correct command line to use, I'll post it back here. Also, ir looks like from your response you just need to make a login request to admin.mvc without any user & password information, correct?

        Thanks again

        Sure has hell hope not. Even though the file is located in a 'protected' directory, I would hope it wouldn't file until an actual admin login occurs.
        Bruce Golub
        Phosphor Media - "Your Success is our Business"

        Improve Your Customer Service | Get MORE Customers | Edit CSS/Javascript/HTML Easily | Make Your Site Faster | Get Indexed by Google | Free Modules | Follow Us on Facebook
        phosphormedia.com

        Comment


          #5
          Originally posted by Bruce - PhosphorMedia View Post


          Sure has hell hope not. Even though the file is located in a 'protected' directory, I would hope it wouldn't file until an actual admin login occurs.

          That is the purpose of that file, and that is how it works; this was documented back in the late 2000's. The directory in question also contains the database credentials for the store database, so if someone has intentionally modified the permissions of that not-web-accessible directory to facilitate unauthorized access to it by other users or software, being able to create an xml file isn't going to be any less secure than any other attack vector which could then be executed.
          David Hubbard
          CIO
          Miva
          [email protected]
          http://www.miva.com

          Comment


            #6
            ok. didn't realize that, however, i was thinking of 'intention' not 'exploits'.l Meaning, if I have something uploading a pre-provide file, I want to intentionally run it, not necessarily run it unintentionally because I fat fingered (or moused) a bookmark to the admin. i guess one should ONLY place that file there when its ready to run regardless of anything else being in place.
            Bruce Golub
            Phosphor Media - "Your Success is our Business"

            Improve Your Customer Service | Get MORE Customers | Edit CSS/Javascript/HTML Easily | Make Your Site Faster | Get Indexed by Google | Free Modules | Follow Us on Facebook
            phosphormedia.com

            Comment


              #7
              Yes, that's true, if it's a particularly large file and there are people working in the admin or cron jobs hitting the admin.mvc file, you'd want to upload it with a different name and then rename when ready.
              David Hubbard
              CIO
              Miva
              [email protected]
              http://www.miva.com

              Comment


                #8
                Thanks guys for the info.
                David I've created a ticket for help with creating the cron/wget command to request the admin.mvc function when you posted a few days back. Still waiting on that response from support.
                Thank You,
                Rick Scofield -

                Comment


                  #9
                  Updating this thread with the solution. I've been able to process the pre-provide.xml automatically using the cron command "curl -s http://YOURDOMAIN/mm5/admin.mvc >dev/null"
                  Thanks for all the help!
                  Thank You,
                  Rick Scofield -

                  Comment

                  Working...
                  X