Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Wikipedia: Mediawiki

How do you allow zip files uploads

 

 

Wikipedia mediawiki RSS feed   Index | Next | Previous | View Threaded


davem at triumphtalk

Oct 16, 2009, 4:55 AM

Post #1 of 3 (1306 views)
Permalink
How do you allow zip files uploads

I need to configure my wiki to allow uploading of zip files. Now I have
added it to my LocalSettings.php file. However I see that it is still
blacklisted and I need to change this setting in another file. I have done
quite a bit of reading up on this but I am still in the dark as to what file
I need to edit and what I need to edit into it?

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


jan at jans-seite

Oct 16, 2009, 5:25 AM

Post #2 of 3 (1272 views)
Permalink
Re: How do you allow zip files uploads [In reply to]

Hello,

.zip files are locked in $wgMimeTypeBlacklist because .zip can be a security
hole.

If you really want to enable the upload, add this to LocalSettings.php:

$wgMimeTypeBlacklist= array(
# HTML may contain cookie-stealing JavaScript and web bugs
'text/html', 'text/javascript', 'text/x-javascript',
'application/x-shellscript',
# PHP scripts may execute arbitrary code on the server
'application/x-php', 'text/x-php',
# Other types that may be interpreted by some servers
'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh',
'text/x-csh',
# Windows metafile, client-side vulnerability on some systems
'application/x-msmetafile',
);
$wgFileExtensions[] = 'zip';

Viele Grüße
Jan

-----Ursprüngliche Nachricht-----
Von: mediawiki-l-bounces [at] lists
[mailto:mediawiki-l-bounces [at] lists] Im Auftrag von DaveM
Gesendet: Freitag, 16. Oktober 2009 13:55
An: mediawiki-l [at] lists
Betreff: [Mediawiki-l] How do you allow zip files uploads

I need to configure my wiki to allow uploading of zip files. Now I have
added it to my LocalSettings.php file. However I see that it is still
blacklisted and I need to change this setting in another file. I have done
quite a bit of reading up on this but I am still in the dark as to what file
I need to edit and what I need to edit into it?

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


davem at triumphtalk

Oct 16, 2009, 5:34 AM

Post #3 of 3 (1277 views)
Permalink
Re: How do you allow zip files uploads [In reply to]

Thanks that was what I needed to know it works great. I don't have a
security problem as it sits behind a firewall on a private network

-----Original Message-----
From: mediawiki-l-bounces [at] lists
[mailto:mediawiki-l-bounces [at] lists] On Behalf Of Jan Luca
Sent: 16 October 2009 02:26 PM
To: 'MediaWiki announcements and site admin list'
Subject: Re: [Mediawiki-l] How do you allow zip files uploads

Hello,

.zip files are locked in $wgMimeTypeBlacklist because .zip can be a security
hole.

If you really want to enable the upload, add this to LocalSettings.php:

$wgMimeTypeBlacklist= array(
# HTML may contain cookie-stealing JavaScript and web bugs
'text/html', 'text/javascript', 'text/x-javascript',
'application/x-shellscript',
# PHP scripts may execute arbitrary code on the server
'application/x-php', 'text/x-php',
# Other types that may be interpreted by some servers
'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh',
'text/x-csh',
# Windows metafile, client-side vulnerability on some systems
'application/x-msmetafile',
);
$wgFileExtensions[] = 'zip';

Viele Grüße
Jan

-----Ursprüngliche Nachricht-----
Von: mediawiki-l-bounces [at] lists
[mailto:mediawiki-l-bounces [at] lists] Im Auftrag von DaveM
Gesendet: Freitag, 16. Oktober 2009 13:55
An: mediawiki-l [at] lists
Betreff: [Mediawiki-l] How do you allow zip files uploads

I need to configure my wiki to allow uploading of zip files. Now I have
added it to my LocalSettings.php file. However I see that it is still
blacklisted and I need to change this setting in another file. I have done
quite a bit of reading up on this but I am still in the dark as to what file
I need to edit and what I need to edit into it?

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Wikipedia mediawiki RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.