You cant just copy files, the db records need to be added to. You should use tge importImages.php maintenance script which will copy them over and create db records.

The directory structure is md5 of the filename but you should not create that yourself.

Note there can be security implications of zip files as they can easily also be jar files.

-- Bawolff

On Sunday, March 26, 2017, Jeffrey Walton noloader@gmail.com wrote:

Hi Everyone,

This is an usual use case.

I am an admin on the VM that hosts our Mediawiki. Our wiki used to allows ZIP uploads from the web but its not functioning at the moment. As an alternate procedure I would like to scp a ZIP file to my home directory, and then manually cp it into wiki. I'm not clear on the directory structure:

# find images/ -name '*.zip' images/3/3a/GCM-AEAD-Test.zip images/3/3a/Cryptest-sh.zip images/7/7c/Oids.zip images/7/75/Twofish-CBC-Filter.zip images/7/77/SEC1.zip images/7/77/Blowfish-CTR-Filter.zip images/7/74/IDEA-CTR-Filter.zip images/0/07/Mersenne.zip images/0/09/AES_RNG.zip ...

My questions are, (1) what is the directory structure I should use when performing the manual copy (how do I determine the intermediate directories)? Or, (2) what is the procedure to perform a manual copy (if I don't need to worry about the directory structure)?

The use case is unusual because we could not find a Mediawiki security and hardening guide. We got a little overzealous and broke uploads during our effort to harden Apache, PHP and Mediawiki. At this point I know its more than ModSecurity because disabling it does not resolve the issue. Its no big deal to me since I can scp and cp files as needed.

(And please don't get distracted about broken uploads from the web interface. I don't care about that problem, and it probably provides us a better security posture. I am happy to live with it).

Thanks in advance.

Jeff

---

Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l