On Thu, Sep 24, 2020 at 6:37 PM Tim Starling <tstarling(a)wikimedia.org> wrote:
On 25/9/20 5:34 am, Jeffrey Walton wrote:
Our site is at
https://www.cryptopp.com/wiki.
Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the
following at the top:
<br />
<b>Warning</b>: php_uname() has been disabled for security reasons in
<b>/var/www/html/w/includes/GlobalFunctions.php</b> on line
<b>1333</b><br />
<!DOCTYPE html>
<html class="client-nojs" lang="en" dir="ltr">
<head>
...
Any ideas how to fix things?
Set $wgOverrideHostname.
Thanks. I guess that is new. We don't seem to have it in LocalSettings.php:
# grep -i name /var/www/html/w/LocalSettings.php
$IP = dirname( __FILE__ );
# match the server name in httpd.conf or logon will break
$wgSitename = 'Crypto++ Wiki';
...
$wgDBname = "my_wiki";
$wgLocalInterwiki = $wgSitename;
...
If that's the level of paranoia you're at, you should probably also
disable Special:Version, which is routinely crawled and can be used to
rapidly exploit vulnerable MediaWiki installations after a
vulnerability is announced. In LocalSettings.php:
$wgSpecialPages['Version'] = DisabledSpecialPage::getCallback(
'Version' );
Yeah, I've been thinking about that for some time now.
What it comes down to is, when we ask for help, you need accurate
information to help us. If I remove Special:Version then you don't
have the information you need. I don't want to screw you by taking
that information away.
Jeff