Hi all, I'm making/playing with a wiki site where I want to make a "user group" who in turn will give access to other people to do edits/submissions stuff like that. No anonymous editing is done. Right now I've done
# Prevent new user registrations except by sysops $wgGroupPermissions['*']['createaccount'] = false;
This is done in LocalSettings.php
which basically prevents anybody from doing any edits except a single user. I am using MySQL as my database. I saw this which might have the goods which I need http://www.mediawiki.org/wiki/Manual:%24wgGroupPermissions but unable to make sense of it. Can somebody help/guide me.
Regards,
On 03/11/2007, shirish shirishag75@gmail.com wrote:
Hi all, I'm making/playing with a wiki site where I want to make a "user group" who in turn will give access to other people to do edits/submissions stuff like that. No anonymous editing is done. Right now I've done
# Prevent new user registrations except by sysops $wgGroupPermissions['*']['createaccount'] = false;
This is done in LocalSettings.php
which basically prevents anybody from doing any edits except a single user. I am using MySQL as my database. I saw this which might have the goods which I need http://www.mediawiki.org/wiki/Manual:%24wgGroupPermissions but unable to make sense of it.
Do you actually want to restrict account creation, or just editing? It's often easier to let people create their own accounts, and then just have someone give them permission to edit. To do that, try something like:
$wgGroupPermissions['*']['read'] = true; # Allow anons to read $wgGroupPermissions['*']['createaccount'] = true; # Allow anons to create accounts $wgGroupPermissions['*']['edit'] = false; # Stop anon edits $wgGroupPermissions['user']['edit'] = false; # Stop accounts without permission editing $wgGroupPermissions['editor']['edit'] = true; # Create a new user group for people with permission to edit $wgGroupPermissions['sysop']['userrights'] = true; # let sysop change user permissions
$wgAddGroups['sysop'] = array( 'editor' ); # Allow sysops to grant edit permissions on Special:Userrights $wgRemoveGroups['sysop'] = array( 'editor'); # Allow sysops to remove those permissions
Hope that helps. You may want to fine tune a few bits (who can create pages, create talk pages, etc).
I have set up a wiki where the LocalSettings is set to not allow unauthenticated users access except to the Login and Help page via a $wgWhiteListRead setting for those two pages. This works just fine.
However, I can go directly to the images directory via the browser and access all content stored there. For example, if my wiki is stored in the directory /var/www/html/wiki on a machine names wikis.example.com and I have saved images, I can access those images by pointing my browser to http://wikis.example.com/wiki/images.
I am presented with the directory tree and can access all files saved under the images directory. I cannot find anything in the archives describing this and how to restrict access. I plan to try .htaccess but I was wondering if there is a better approach and whether other directories are as unprotected as the images directory from being read by non-logged in users. Maybe a httpd.conf directive?
Any help appreciated.
-Jim
On Nov 5, 2007 4:00 PM, Sullivan, James (NIH/CIT) [C] sullivan@mail.nih.gov wrote:
I am presented with the directory tree and can access all files saved under the images directory. I cannot find anything in the archives describing this and how to restrict access. I plan to try .htaccess but I was wondering if there is a better approach and whether other directories are as unprotected as the images directory from being read by non-logged in users. Maybe a httpd.conf directive?
How secure do you need the images? Do you want it so that nobody can access an image without being logged into the wiki, even if they know the file's location/URL? (For this, you would need to use img_auth.php: < http://www.mediawiki.org/wiki/Manual:Image_Authorisation%3E.) Or do you just not want somebody to have access to all your images in directory listing format? For that, you can just disable the display of indexes through httpd.conf or .htaccess (Options -Indexes).
I think the Image Authorization will do what I need though it looks like a bit of work to squeeze into a bunch of existing wikis that I have. I'll set the .htaccess or httpd.conf settings as you suggested to get rid of the directory listings.
Security through obscruity used to be good before web crawlers came around.
Thanks a bunch!
-Jim
-----Original Message----- From: Emufarmers Sangly [mailto:emufarmers@gmail.com] Sent: Monday, November 05, 2007 4:23 PM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Securing images directory
On Nov 5, 2007 4:00 PM, Jim wrote:
I am presented with the directory tree and can access all files saved under the images directory. I cannot find anything in the archives describing this and how to restrict access. I plan to try .htaccess but I was wondering if there is a better approach and whether other directories are as unprotected as the images directory from being read
by non-logged in users. Maybe a httpd.conf directive?
How secure do you need the images? Do you want it so that nobody can access an image without being logged into the wiki, even if they know the file's location/URL? (For this, you would need to use img_auth.php: < http://www.mediawiki.org/wiki/Manual:Image_Authorisation%3E.) Or do you just not want somebody to have access to all your images in directory listing format? For that, you can just disable the display of indexes through httpd.conf or .htaccess (Options -Indexes).
-- Arr, ye emus, http://emufarmers.com _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Does anyone know what is required to enable the GD graphics engine for thumbnails other than to uncomment the dll line in php.ini? php info reports the GD engine loaded, but nothing happens to to the images. On the mediawiki site there was text about other lines to include in LocalSettings.php (like the path to the convert command) but I cannot find any file named "convert." Also there are references to two ImageMagick lines to use in LocalSettings.php but nothing equivalent for GD.
Steve VanSlyck wrote:
Does anyone know what is required to enable the GD graphics engine for thumbnails other than to uncomment the dll line in php.ini? php info reports the GD engine loaded, but nothing happens to to the images. On the mediawiki site there was text about other lines to include in LocalSettings.php (like the path to the convert command) but I cannot find any file named "convert." Also there are references to two ImageMagick lines to use in LocalSettings.php but nothing equivalent for GD.
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
If you install GD correctly within PHP there are *no* configuration settings that need adjusting in LocalSettings.php - please check that php_gd2.dll exists in your ext/ directory, otherwise download the zip file from http://www.php.net/downloads.php and unzip it over your current PHP installation so that the ext directory appears at e.g. C:\Program Files\PHP\ext (where C:\Program Files\PHP is the place you installed PHP too).
MinuteElectron.
Thank you, MinuteElectron. I had trouble in 7th grade algebra too, because I needed to see every single step in solving a formula due to unwillingness to "jump" steps.
After two hours of screaming yesterday, in attempting to upload a 355k file, I discovered: 1. In LocalSettings.php, ini_set( 'memory_limit', '20M' ); // needs to be adjusted [don't forget this one, it can prevent you from ever getting back to the the edit image page even if a thumbnail does appear!]
2. In apache2/php.ini memory_limit = 8M // needs to be adjusted post_max_size = 8M // needs to be adjusted file_uploads = On // needs to be confirmed as "On" upload_max_filesize = 2M // needs to be adjusted
3. And, of course, as you said, to turn on GB in the first place the line _extension=php_gd2.dll_ must be uncommented in apache2/php.ini and the dll must exist in the php/ext directory.
My desire is to have more detailed instructions on *how* install it correctly. While I have years of experience in Windows and various flavors of DOS, I have none with Unix other than some of the cool Unix utilities that work under DOS, and I'm in fact quite baffled by the level of sophistication "the Internet" assumes for Unix users in just how to install a program. Particularly I've never understood why Unix programs are usually provided only in an non-compiled state. But "that's as may be," as the Wizard said.
I can continue testing from here. At this point my question has evolved to how to enable thumbnails for additional filetypes. According to phpinfo(), all I currently have is
GIF Read Support GIF Create Support JPG Support PNG Support WBMP Support XBM Support
I can locate and download the GD library, but for a windows box, what do I do with it after unpacking it?
What is the difference between ImageMagick and Magick Wand?
Steve VanSlyck wrote:
What is the difference between ImageMagick and Magick Wand?
ImageMagick is the image library (which also comes with several programs). Magick Wand is the C interface for that library. You also have PerlMagick++ (C++ interface) and PerlMagick (Perl interface).
So - for MediaWiki all I would want is ImageMagick, not Magick Wand, given that I don't own any compiler?
Platonides wrote:
Steve VanSlyck wrote:
What is the difference between ImageMagick and Magick Wand?
ImageMagick is the image library (which also comes with several programs). Magick Wand is the C interface for that library. You also have PerlMagick++ (C++ interface) and PerlMagick (Perl interface).
On 07/11/2007, Steve VanSlyck s.vanslyck@spamcop.net wrote:
So - for MediaWiki all I would want is ImageMagick, not Magick Wand, given that I don't own any compiler?
Yep. MediaWiki uses one ImageMagick binary called "convert" to do its work with images. It's the path to that binary that you set in LocalSettings.php .
- d.
Thanks. Does it work natively for creation of thumbnails (all of which I've ever seen are WAY too big to paint on my own thumb) for DOC's and PDF's?
David Gerard wrote:
On 07/11/2007, Steve VanSlyck s.vanslyck@spamcop.net wrote:
So - for MediaWiki all I would want is ImageMagick, not Magick Wand, given that I don't own any compiler?
Yep. MediaWiki uses one ImageMagick binary called "convert" to do its work with images. It's the path to that binary that you set in LocalSettings.php .
On 08/11/2007, Steve VanSlyck s.vanslyck@spamcop.net wrote:
David Gerard wrote:
On 07/11/2007, Steve VanSlyck s.vanslyck@spamcop.net wrote:
So - for MediaWiki all I would want is ImageMagick, not Magick Wand, given that I don't own any compiler?
Yep. MediaWiki uses one ImageMagick binary called "convert" to do its work with images. It's the path to that binary that you set in LocalSettings.php .
Thanks. Does it work natively for creation of thumbnails (all of which I've ever seen are WAY too big to paint on my own thumb) for DOC's and PDF's?
Not that I've seen, unfortunately. I expect rendering those would require format-specific renderers. It may be a project worth attempting, or it may not ... I know Konqueror (the KDE file manager) does PDF previews, but not DOC, so at least on-the-fly thumbnailing of PDFs should be feasible. If someone wants to write it.
- d.
Am I correct to understand that in, for example,
Help:Configuration_settings Manual:Configuration_settings
"Help" and "Manual" are namespaces?
If so, is there a page that will list all the pages belonging to a name space?
On 08/11/2007, Steve VanSlyck s.vanslyck@spamcop.net wrote:
Am I correct to understand that in, for example, Help:Configuration_settings Manual:Configuration_settings "Help" and "Manual" are namespaces? If so, is there a page that will list all the pages belonging to a name space?
[[Special:Allpages]] has a selection thing at the top to view per namespace.
- d.
Is there a simple way - i.e., in one single place - to modify the core code such that italicizing a word would be done with slashes instead of single quotes? For example:
/ italics /
(But without necessarily needing the space between the slash and the word.)
Steve VanSlyck wrote:
Is there a simple way - i.e., in one single place - to modify the core code such that italicizing a word would be done with slashes instead of single quotes? For example:
/ italics /
(But without necessarily needing the space between the slash and the word.)
A) Create a new thread for new subjects. B) That can be done in an extension. Someone did and posted a basic implementation of it before. Check the archives of mediawiki-l/wikitech-l.
mediawiki-l@lists.wikimedia.org