Folks, a couple of questions, and I'm a complete n00b, so be kind:
(1) I need to let users upload HTML documents (HTML output from Microsoft Project, actually) and link to it so we can see the project files in our project wiki. Does it suffice to add '.html' to the uploadable types? Then (it would appear) you'd just treat the html file as a Media link.
(2) This is probably some fool Apache issue, but I still hope someone might have an idea. On our diff pages, when you try to look at the difference between two versions, instead of seeing the difference, you're presented with a file download asking if you want to download index.php.
This is obviously undesirable. Anyone got any ideas?
(3) Is there such a thing anywhere as a "cookbook" for doing administrative tasks for mediawiki? Some of the faqs seem to have some of this, but I often don't seem to find what I need.
Charles R Martin | Sr Staff Engineer | Sun Microsystems, Inc charles.martin@sun.com 303 661 6532
Hello Charles,
For (1) I would not allow uploads of HTML through MediaWiki -- this is much too big of a security hole. I would build a custom script that uploads files but scans through for any illegal HTML tags (do it by whitelist, not by blacklist) -- the script can also integrate the uploaded files into MediaWiki *after* it has passed the security inspection.
For (2) It seems to me that you do not have "diff3" installed on your machine. Type in "which diff3" and see whether or not you have it installed. You might need to change it to a different diff engine, or install the proper one.
For (3), most of the information that you need is available at http://www.mediawiki.org/ Look through the manual there, and ask specific questions here.
I hope that this helps, Kasimir
On 1/12/07, Charles Martin Charles.Martin@sun.com wrote:
Folks, a couple of questions, and I'm a complete n00b, so be kind:
(1) I need to let users upload HTML documents (HTML output from Microsoft Project, actually) and link to it so we can see the project files in our project wiki. Does it suffice to add '.html' to the uploadable types? Then (it would appear) you'd just treat the html file as a Media link.
(2) This is probably some fool Apache issue, but I still hope someone might have an idea. On our diff pages, when you try to look at the difference between two versions, instead of seeing the difference, you're presented with a file download asking if you want to download index.php.
This is obviously undesirable. Anyone got any ideas?
(3) Is there such a thing anywhere as a "cookbook" for doing administrative tasks for mediawiki? Some of the faqs seem to have some of this, but I often don't seem to find what I need.
Charles R Martin | Sr Staff Engineer | Sun Microsystems, Inc charles.martin@sun.com 303 661 6532
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Kasimir Gabert wrote:
Hello Charles,
For (1) I would not allow uploads of HTML through MediaWiki -- this is much too big of a security hole. I would build a custom script that uploads files but scans through for any illegal HTML tags (do it by whitelist, not by blacklist) -- the script can also integrate the uploaded files into MediaWiki *after* it has passed the security inspection.
Okay, thanks, but this is under pretty tight control. Let's say I *really* *really* wanted to do this, even with security concerns in mind. Let's say, further, that I've already taken HTML types out of $wgFileBlacklist, text/html and similar types out of $wgMimeTypeBlacklist, and set $wgCheckFileExtensions, $wgStrictFileExtensions, and $wgVeryfyMimeType all to false ... and I still get an error and it refuses to upload my html files.
What am I missing?
For (2) It seems to me that you do not have "diff3" installed on your machine. Type in "which diff3" and see whether or not you have it installed. You might need to change it to a different diff engine, or install the proper one.
I appear to have a proper diff3, but what I'm getting as a result is a file called "index.php" with these contents (inserted as a quote to make it stand out):
[Process] Type=Diff text Engine=MediaWiki Script=http://vortex.stortek.com/wiki/index.php Special namespace=Special
[File] Extension=wiki URL=http://vortex.stortek.com/wiki/index.php?title=Main_Page&action=raw&...
[File 2] Extension=wiki URL=http://vortex.stortek.com/wiki/index.php?title=Main_Page&action=raw&...
Does this give anyone any clues?
Thanks,
Charlie
On 16/01/07, Charles Martin Charles.Martin@sun.com wrote:
I appear to have a proper diff3, but what I'm getting as a result is a file called "index.php" with these contents (inserted as a quote to make it stand out):
Disable the "use external diff" user preference.
Rob Church
Rob Church wrote:
On 16/01/07, Charles Martin Charles.Martin@sun.com wrote:
I appear to have a proper diff3, but what I'm getting as a result is a file called "index.php" with these contents (inserted as a quote to make it stand out):
Disable the "use external diff" user preference.
Bingo!
Thanks!
... now, how did you know this?
On 16/01/07, Charles Martin Charles.Martin@sun.com wrote:
... now, how did you know this?
Option A: I'm just that good.
Option B: The text in the downloaded file is what we send as a "control" file - that is, it's what MediaWiki expects to be picked up and parsed in a helper script. We have something quite similar for external editing.
Rob Church
Rob Church wrote:
On 16/01/07, Charles Martin Charles.Martin@sun.com wrote:
... now, how did you know this?
Option A: I'm just that good.
Hmmm. Uh, subtext: how would *I* know it, so I can be that good too?
Option B: The text in the downloaded file is what we send as a "control" file - that is, it's what MediaWiki expects to be picked up and parsed in a helper script. We have something quite similar for external editing.
Aha! Great.
Thanks, seriously.
On 16/01/07, Charles Martin Charles.Martin@sun.com wrote:
Hmmm. Uh, subtext: how would *I* know it, so I can be that good too?
Me, I just listen to Brion and Tim. Not as often as they'd like, but... ;)
Rob Church
mediawiki-l@lists.wikimedia.org