Page MenuHomePhabricator

Add option for Images upload directory permissions
Closed, ResolvedPublic

Description

Author: bbrazil

Description:
In a non-shared hosting enviroment with suphp and where there's 500+ shell
accounts, 777 directories for images are an unnessecary security risk. This
patch ( http://www.netsoc.tcd.ie/~bbrazil/tmp/mediawiki-permissions.diff ) adds
a new configuration variable $wgUploadPermissions which lets you control this.
Default is 777 to preserve current semantics.

I suggest 755 for those in a suphp type enviroment such as ours. Tested on
Mediawiki 1.6.7 on apache 2.0.58/php 4.4.1/Solaris 8/sparc.


Version: 1.6.x
Severity: normal
OS: Solaris
Platform: PC
URL: http://www.netsoc.tcd.ie/~bbrazil/tmp/mediawiki-permissions.diff

Details

Reference
bz6295

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:21 PM
bzimport set Reference to bz6295.
bzimport added a subscriber: Unknown Object (MLST).