Package: drupal7 Version: 7.11-1 Severity: minor Tags: squeeze-backports wheezy sid patch
The cron.sh script should reset $CRON_KEY for each site, as it probably won't be the same. As it is now, it's trying to use the CRON_KEY from the previous site when no key is defined, which results in error messages such as: Feb 10 20:00:09 myserver mysite_drupal7: http://mysite.url|1328896809|access denied|111.222.33.44|http://mysite.url/cron.php?cron_key=MYTOPSECRETKEY||0||node Feb 10 20:00:09 myserver mysite_drupal7: http://mysite.url|1328896809|cron|111.222.33.44|http://mysite.url/cron.php?cron_key=MYTOPSECRETKEY||0||Cron could not run because an invalid key was used. Proposed solution: Add 'CRON_KEY=""' after 'BASE_URL=""' in /usr/share/drupal7/scripts/cron.sh (debian/cron.sh in the source). -- System Information: Debian Release: 6.0.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable'), (400, 'testing'), (50, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages drupal7 depends on: ii apache2-mpm-prefork 2.2.16-6+squeeze6 Apache HTTP Server - traditional n ii curl 7.21.0-2.1+squeeze1 Get a file from an HTTP, HTTPS or ii dbconfig-common 1.8.46+squeeze.0 common framework for packaging dat ii debconf [debconf-2.0 1.5.36.1 Debian configuration management sy ii mysql-client-5.1 [vi 5.1.49-3 MySQL database client binaries ii php5 5.3.3-7+squeeze7 server-side, HTML-embedded scripti ii php5-gd 5.3.3-7+squeeze7 GD module for php5 ii php5-mysql 5.3.3-7+squeeze7 MySQL module for php5 ii postfix [mail-transp 2.7.1-1+squeeze1 High-performance mail transport ag ii wwwconfig-common 0.2.1 Debian web auto configuration Versions of packages drupal7 recommends: ii mysql-server 5.1.49-3 MySQL database server (metapackage ii mysql-server-5.1 [mysql-serve 5.1.49-3 MySQL database server binaries and drupal7 suggests no packages. -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
