Hi Brion,
If your sites are really private, you should not use MediaWiki to hold them. It's really, really not designed to hide information.
Yes, I'm aware of it. Since the main point of the wiki idea is that there are no private sites :-)
You should upgrade to 1.3.9 immediately, as there are potentially exploitable security holes in 1.3.5.
Thanks.
| $requiredUser = $wgRequireUser[$name];
Note that the above line doesn't seem to do anything
Whops, thats a relict of earlier tests of mine. One can safely delete this line.
An insecure page containing a template inclusion can extract the hidden page's text, like {{:Hauptseite:private}} or {{:Tbd}}.
You are right! I haven't thought about that... :-/
Thanks for your comments,
- Moritz