This is not an issue with poormanscron, but a request for comments about how it's being triggered.

Log entries like this puzzle me:

some.outside.ip.address - - [01/Jun/2013:03:47:54 -0700] "GET /poormanscron/run-cron-check HTTP/1.1" 200 21 "" "Mozilla/5.0 (Windows NT 6.1; rv:2.0b10) Gecko/20100101 Firefox/4.0b10"

I know I can try to block cron scripts from being triggered by all and sundry.
But meanwhile I'm wondering why the referer pages are internal, that is, on my own web site.

The external IP addresses vary; referers are (apparently) various pages on my own web site; the user-agent is always some variant of Mozilla.

Is the referer perhaps being forged? Am I misreading the log?