Hash zips to ensure that the same thing is downloaded about godot-asset-library HOT 4 CLOSED

Since downloading the zips might take a lot of time, we will have to run the PHP script that does it in the background. To do this there are three main approaches:

• Use cron to schedule a job every X minutes. Looks like the cleanest of all the variants
  • Or a watchdog with a while(true) script.
• Use forking to split the process and terminate the client-side copy. The other copy would download and terminate later. If the other copy fails to start or crashes for whatever reason, we won't ever update the hash.
• Use exec or similar to launch a process in the background (with &). Same as the previous, plus it might open an additional attack surface.

On IRC we decided that we would use the first approach, since it is cleaner than the others.

from godot-asset-library.

@bojidar-bg SHA-256 is okay.

from godot-asset-library.

@alketii ~ Actually, there is one more design consideration left -- when should the hash be updated, when the asset is approved, or when the edit is submitted... WDYT?

from godot-asset-library.

@bojidar-bg I think moderator should update the hash manually

from godot-asset-library.