Author: bbrazil
Description:
In a non-shared hosting enviroment with suphp and where there's 500+ shell
accounts, 777 directories for images are an unnessecary security risk. This
patch ( http://www.netsoc.tcd.ie/~bbrazil/tmp/mediawiki-permissions.diff ) adds
a new configuration variable $wgUploadPermissions which lets you control this.
Default is 777 to preserve current semantics.
I suggest 755 for those in a suphp type enviroment such as ours. Tested on
Mediawiki 1.6.7 on apache 2.0.58/php 4.4.1/Solaris 8/sparc.
Version: 1.6.x
Severity: normal
OS: Solaris
Platform: PC
URL: http://www.netsoc.tcd.ie/~bbrazil/tmp/mediawiki-permissions.diff