[Mediawiki-l] How to secure new wiki?

[Rusty Shackleford]

I've read this page:

    http://meta.wikimedia.org/wiki/Documentation:Security

but I'd like to know how to require editors to log in first, and how to
disable account creation.

Also, I'm not sure how to disable running PHP scripts in any directories
except the script directories.  Can I just copy this ato the end of my
httpd.conf file and then reboot the server:

<Location "/wiki/images">
 php_admin_flag engine off
 AddType text/plain .html .htm .shtml
</Location>

All related comments on how to secure a wiki are welcome.

TIA