On Thu, Sep 24, 2020 at 6:37 PM Tim Starling <[email protected]> wrote:
>
> On 25/9/20 5:34 am, Jeffrey Walton wrote:
> > Our site is at https://www.cryptopp.com/wiki.
> >
> > Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the
> > following at the top:
> >
> > <br />
> > <b>Warning</b>: php_uname() has been disabled for security reasons in
> > <b>/var/www/html/w/includes/GlobalFunctions.php</b> on line
> > <b>1333</b><br />
> > <!DOCTYPE html>
> > <html class="client-nojs" lang="en" dir="ltr">
> > <head>
> > ...
> >
> > Any ideas how to fix things?
>
> Set $wgOverrideHostname.
Thanks. I guess that is new. We don't seem to have it in LocalSettings.php:
# grep -i name /var/www/html/w/LocalSettings.php
$IP = dirname( __FILE__ );
# match the server name in httpd.conf or logon will break
$wgSitename = 'Crypto++ Wiki';
...
$wgDBname = "my_wiki";
$wgLocalInterwiki = $wgSitename;
> ...
> If that's the level of paranoia you're at, you should probably also
> disable Special:Version, which is routinely crawled and can be used to
> rapidly exploit vulnerable MediaWiki installations after a
> vulnerability is announced. In LocalSettings.php:
>
> $wgSpecialPages['Version'] = DisabledSpecialPage::getCallback(
> 'Version' );
Yeah, I've been thinking about that for some time now.
What it comes down to is, when we ask for help, you need accurate
information to help us. If I remove Special:Version then you don't
have the information you need. I don't want to screw you by taking
that information away.
Jeff
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
