Difference between revisions of "Configure wiki security"

From Organic Design wiki
m (Protecting files)
m (Protecting files)
Line 12: Line 12:
 
// Codebase hack - title not extracted properly for ArticlePath = "/$1"
 
// Codebase hack - title not extracted properly for ArticlePath = "/$1"
 
$path = preg_replace( '|^.+/img_auth.php|', '', $path );</php>}}
 
$path = preg_replace( '|^.+/img_auth.php|', '', $path );</php>}}
 +
[[Catgeory:MediaWiki]]

Revision as of 00:08, 3 March 2012

Procedure.svg Configure wiki security
Organic Design procedure

Protecting files

MediaWiki has a script called img_auth.php which is used to allow files to be protected. Requests to the image files are made via the img_auth.php script instead of into the image file structure, and the files are stored outside of web-accessible space. More information about the configuration can be found at MW:Manual:Image Authorization.

The setup is quite simple and just involves setting $wgUploadDirectory to the internal absolute location of the images, and $wgUploadPath to the external location of the img_auth.php script.

Unfortunately this method seems to have a problem with Friendly URL's, I had to patch the img_auth.php script so that the title part of the PATH_INFO would be extracted properly.

^.+/img_auth.php

Catgeory:MediaWiki