Page 1 of 1

Forecast Comparison Authentication Issue

Posted: Sun Jan 07, 2018 5:38 pm
by SimonB
Jachym

I'm not sure if I'm doing something wrong but I'm struggling with the forecastsave part of forecastComparison running from a cron (perhaps something has changed since I last check functionality). I cannot run that using the ?password= at the end of the command (http://mysite/plugins/forecastCompariso ... word=XXXXX) immediately after running the comparison. It doesn't work in the browser either

The cron job is as follows

curl --request GET 'http://mysite/plugins/forecastCompariso ... word=XXXXX'

I get unauthorised access, using both the update and admin password.

Any thoughts?.

Re: Forecast Comparison Authentication Issue

Posted: Sun Jan 07, 2018 6:30 pm
by SimonB
I'm actually having the same issue with the offline notifications in the cron, but it does work in the browser

Re: Forecast Comparison Authentication Issue

Posted: Mon Jan 08, 2018 12:21 pm
by SimonB
Jachym? Any thoughts?

Re: Forecast Comparison Authentication Issue

Posted: Mon Jan 08, 2018 12:43 pm
by Jachym
Hi,
yes I guess I know, this was never an official feature and it stopped working in v11 because it is now better secured, it no longer passes passwords via URL, which is unsafe, it uses session, which require admin logged in and this cannot be done by a server