Hi Brion,
If your sites are really private, you should not use
MediaWiki to hold
them. It's really, really not designed to hide information.
Yes, I'm aware of it. Since the main point of the wiki idea is that there are
no private sites :-)
You should upgrade to 1.3.9 immediately, as there are
potentially
exploitable security holes in 1.3.5.
Thanks.
| $requiredUser =
$wgRequireUser[$name];
Note that the above line doesn't seem to do anything
Whops, thats a relict of earlier tests of mine. One can safely delete this
line.
An insecure page containing a template inclusion can
extract the hidden
page's text, like {{:Hauptseite:private}} or {{:Tbd}}.
You are right! I haven't thought about that... :-/
Thanks for your comments,
- Moritz