I can see this, the command "Fire!" triggers the .cmd batchfile, and the battle starts...
Fred
-----Original Message----- From: Mike [mailto:xclbur5150@yahoo.com] Sent: Friday, May 11, 2007 02:33 PM To: 'MediaWiki announcements and site admin list' Subject: Re: [Mediawiki-l] File upload help
IMPORTANT: I cannot imagine any circumstance whereby you would allow
the upload (and possible execution) of a .cmd, .sys, .com, . . . File. Unless you are using this as a developer wiki in an extremely restricted environment, it sounds like a wonderful way to compromise your system.
Well, the wiki is for an online game. Some of the files used to play the game use .cmd extensions. The files that will be uploaded would not be windows executable .cmd files (unless like you said a malicious user uploads something they shouldn't) I will see if there is a way around using the .cmd file type, but if not then am I correct in thinking that it is possible to remove the .cmd from the blacklist in DefaultSettings.php?
Thanks so much for all the help! Mike
Rob Church robchur@gmail.com wrote: On 11/05/07, Oliver Schalch wrote:
Aint $wgFileBlacklist has highest priority, so you have no way to upload files with extension in the blacklist, even if you add to $wgFileExtensions array.
I guess, he has to remove the 'cmd' from DefaultSettings.php...
The file blacklist is for your safety and your users' safety. Removing the extension from the blacklist would mean that a malicious user would be able to upload a Windows command line script (equivalent to a shell script) which could lead to execution rights on the client if downloaded, especially since Windows has an annoying habit of executing things left, right and centre.
You therefore remove this from the blacklist at your own risk.
Rob Church
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
The fish are biting. Get more visitors on your site using Yahoo! Search Marketing. _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
1. Is there any way to add things like centering, line breaks, and tables to the edit toolbar? While reading the help files I noticed a screen shot of a toolbar that has the tables button and several others, but I can't find how to get the addtional buttons on the toolbar. My edit tool bar stops at the horizontal line, the one I saw had about 6-8 more buttons if that helps. I'm a lazy typer, so anything I can click on is great! :)
2. Is there any way to turn off the feature that makes the wiki ignore newlines? What I would like to happen is for it to automatically wrap text when it gets to the end of the screen so the screen doesn't get too wide, but when you hit enter for a new line for it to actually start a new line. I know I can use the <br> or <pre> tags when I need to, but it would be much more convienent to not have to do that.
Thanks!
--------------------------------- Be a better Globetrotter. Get better travel answers from someone who knows. Yahoo! Answers - Check it out.
On 13/05/07, Mike xclbur5150@yahoo.com wrote:
- Is there any way to add things like centering, line breaks, and tables to the edit toolbar? While reading the help files I noticed a screen shot of a toolbar that has the tables button and several others, but I can't find how to get the addtional buttons on the toolbar. My edit tool bar stops at the horizontal line, the one I saw had about 6-8 more buttons if that helps. I'm a lazy typer, so anything I can click on is great! :)
These are added using JavaScript helper functions; see http://en.wikipedia.org/wiki/MediaWiki:Common.js for an example (look for "extra toolbar options").
- Is there any way to turn off the feature that makes the wiki ignore newlines? What I would like to happen is for it to automatically wrap text when it gets to the end of the screen so the screen doesn't get too wide, but when you hit enter for a new line for it to actually start a new line. I know I can use the <br> or <pre> tags when I need to, but it would be much more convienent to not have to do that.
Hack the parser.
Rob Church
I'm sorry, I'm very new to this and I'm learning as quickly as I can. What exactly is a JavaScript helper function and how do I use it? I searched my wiki for a file named common.js because I thought I would just have to edit that file with the code from the link you gave me. I also tried googling JavaScript helper function but that didn't help me much.
I'm sure all of these basic questions are quite annoying, but you've all been so helpful! Thank you very much!
Mike
These are added using JavaScript helper functions; see http://en.wikipedia.org/wiki/MediaWiki:Common.js for an example (look for "extra toolbar options").
--------------------------------- It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar.
On 13/05/07, Mike xclbur5150@yahoo.com wrote:
What is a JavaScript helper function and how do I use it?
A "helper function" is just convenience code to do something that's otherwise a bit more complex. In this case, I'm referring to functions which add buttons to the toolbar. JavaScript is just the language these are written in.
Searched for common.js
No, "MediaWiki:Common.js" is a page which MediaWiki sends to the client to be processed as JavaScript on page views, in all recent release versions of the software. Code such as the example on the English Wikipedia web site can take advantage of this to, for example, call the code mentioned above to add edit buttons to the toolbar.
You'll want to "borrow" some of the code from http://en.wikipedia.org/wiki/MediaWiki:Common.js and place the appropriate lines into the MediaWiki:Common.js page on your wiki, creating it if it doesn't exist. You will then most likely want to alter the code to change what buttons you're adding, images, etc.
Rob Church
Ok, I was fairly confident that I understood what I needed to do, but it didn't work. I created a page called MediaWiki:Common.js (I searched the site and it did not find one, so I clicked on "create this page". I copied all of the code from the "extra toolbar options" section of the MediaWiki:Common.js page you sent me, and pasted it into the page I created. I saved the page and then clicked on a page to edit but the toolbar is unchanged.
Did I do something wrong?
Thank you so much! Mike
Rob Church robchur@gmail.com wrote: On 13/05/07, Mike wrote:
What is a JavaScript helper function and how do I use it?
A "helper function" is just convenience code to do something that's otherwise a bit more complex. In this case, I'm referring to functions which add buttons to the toolbar. JavaScript is just the language these are written in.
Searched for common.js
No, "MediaWiki:Common.js" is a page which MediaWiki sends to the client to be processed as JavaScript on page views, in all recent release versions of the software. Code such as the example on the English Wikipedia web site can take advantage of this to, for example, call the code mentioned above to add edit buttons to the toolbar.
You'll want to "borrow" some of the code from http://en.wikipedia.org/wiki/MediaWiki:Common.js and place the appropriate lines into the MediaWiki:Common.js page on your wiki, creating it if it doesn't exist. You will then most likely want to alter the code to change what buttons you're adding, images, etc.
Rob Church
_______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
--------------------------------- Got a little couch potato? Check out fun summer activities for kids.
Mike wrote:
Ok, I was fairly confident that I understood what I needed to do, but it didn't work. I created a page called MediaWiki:Common.js (I searched the site and it did not find one, so I clicked on "create this page". I copied all of the code from the "extra toolbar options" section of the MediaWiki:Common.js page you sent me, and pasted it into the page I created. I saved the page and then clicked on a page to edit but the toolbar is unchanged.
Did I do something wrong?
Thank you so much! Mike
A) You need to refresh you cache. Ctrl+F5 on most brwosers.
B) In ancient MediaWiki versions, there's no MediaWiki:Common.js and you should use MediaWiki:Monobook.js instead.
mediawiki-l@lists.wikimedia.org