> Would it be more secure, if you would write all changes that
> should be made to a database and those commands were executed
> by a script that is run as cronjob?

You'd have some time before the changes become effective, which is the
good thing about it.
But if some evil user has the chance to make any changes, then those
changes will become effective anyway when you're not there to check
things. So then where's your security ?

How about if you put the changes in a table and email a predefined
root-equivalent user that changes have been made. Then any changes will
not become effective untill the user that has been emailed has replied
to acknowledge or something.

Rob

[ reply ]