On Thu, Sep 24, 2020 at 6:37 PM Tim Starling tstarling@wikimedia.org wrote:
On 25/9/20 5:34 am, Jeffrey Walton wrote:
Our site is at https://www.cryptopp.com/wiki.
Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the following at the top:
<br /> <b>Warning</b>: php_uname() has been disabled for security reasons in <b>/var/www/html/w/includes/GlobalFunctions.php</b> on line <b>1333</b><br /> <!DOCTYPE html> <html class="client-nojs" lang="en" dir="ltr"> <head> ...
Any ideas how to fix things?
Set $wgOverrideHostname.
Thanks. I guess that is new. We don't seem to have it in LocalSettings.php:
# grep -i name /var/www/html/w/LocalSettings.php $IP = dirname( __FILE__ ); # match the server name in httpd.conf or logon will break $wgSitename = 'Crypto++ Wiki'; ... $wgDBname = "my_wiki"; $wgLocalInterwiki = $wgSitename;
... If that's the level of paranoia you're at, you should probably also disable Special:Version, which is routinely crawled and can be used to rapidly exploit vulnerable MediaWiki installations after a vulnerability is announced. In LocalSettings.php:
$wgSpecialPages['Version'] = DisabledSpecialPage::getCallback( 'Version' );
Yeah, I've been thinking about that for some time now.
What it comes down to is, when we ask for help, you need accurate information to help us. If I remove Special:Version then you don't have the information you need. I don't want to screw you by taking that information away.
Jeff