Recent Changes - Search:

<<<<<<< Wonderfull great site http://creatorsflow.com/pharmacy/is-bactrim-used-to-treat-gonorrhea-rvyy.pdf bactrim jarabe pediatrico precio In addition to Brixmor, it has filed IPO plans for U.S. hotel operators Hilton Worldwide Inc and budget hotel operator Extended Stay America. It may sell or IPO budget hotel chain La Quinta Inns & Suites. ======= <<<<<<< I'm training to be an engineer http://gatewayproperties.in/pharmacy/dermaroller-rogaine-ghcm.pdf buy rogaine foam canada Ms Cleoch added: "I ­believe we have gone past the point of entering in to negotiations or open dialogue with Russia, and Glasgow should make a stand of solidarity with LGBT people in Russia by ending the Twinning Agreement immediately. ======= <<<<<<< Could you ask him to call me? https://omelhordocedomundo.com.br/pharmacy/para-que-sirve-la-atorvastatina-tabletas-de-20-mg-mnjk.pdf atorvastatin orion 20 mg The U.S. Food and Drug Administration warned last April thatfentanyl patches could cause life-threatening harm to childrenwho were accidentally exposed to patches that may have fallen tothe floor or been improperly discarded. ======= <<<<<<< US dollars http://creatorsflow.com/pharmacy/insomnia-from-zoloft-rvyy.pdf buspirone and zoloft together Obama scolded Republicans on Tuesday for demandingnegotiations, but said he would talk about anything includingthe healthcare law if Republicans re-opened the government andlifted the debt ceiling even for the short term. ======= <<<<<<< What's your number? http://www.astroadhesives.com/ibuprofenparacetamol-for-oral-suspension-janj metocarbamol mas ibuprofeno plm Both studies, published in the British Medical Journal(BMJ)on Wednesday, found that people living with the highestlevels of aircraft noise had increased risks of stroke, coronaryheart disease and other cardiovascular diseases. ======= <<<<<<< Excellent work, Nice Design https://looesardines.co.uk/pharmacy/getz-pharma-brwp.pdf coin clinic The actor, whose decision to leave Downton saw his character getting killed off in a car accident, plays the role of Ian Katz in the movie adaptation of the real life events that resulted in the build up of Wikileaks. ======= <<<<<<< Which year are you in? http://eletrothermobsb.com.br/pharmacy/valsartan-basics-160-mg-brwp.pdf valsartan hidroclorotiazida precio farmacia guadalajara The alliance is part of a trend towards market consolidationas the Affordable Care Act is pushing hospitals to achievegreater negotiating leverage, said Joel Cantor, director of theCenter for State Health Policy at Rutgers University. ======= <<<<<<< this is be cool 8) https://mail.ienuestrasenoradelperpetuosocorro.edu.co/pharmacy/salbutamol-sterydy-opinie-rvyy.pdf salbutamol sirop contre indication After exploring Jesus' hometown of Nazareth, visit the cliffs of Mount Kedumim, or Mount Precipice. The mountainside is said to be the site of the attempt of an angry mob to throw Jesus over a cliff after his bold proclamation in the Nazareth synagogue in Luke 4:16-30. ======= <<<<<<< Whereabouts in are you from? http://www.astroadhesives.com/differine-creme-maroc-rvyy differine creme maroc People who complained about the Smart car's lack of speed probably won't find much solace in the Armadillo-T. The prototype car's top speed currently stands at around 37 miles per hour, half as fast as the Smart car's 75 miles per hour. ======= <<<<<<< I've got a full-time job https://www.cloudtracker.com.br/pharmacy/index.php/generic-for-cyproheptadine-4mg-ekud.pdf cyproheptadine hcl syrup ip in tamil Prosecutors said Moises Martinez, 52, strangled traffic enforcement agent Yajaira Reyes. Her body was discovered in a trash can inside their Walton Ave. apartment by cops early Sunday after Martinez attracted their attention by parking his livery cab on the sidewalk in front of their building. ======= <<<<<<< Children with disabilities http://twltr.techworldlogics.com/pharmacy/la-ivermectina-hace-dar-diarrea-ghcm.pdf ivermectina chile doctor simi Another car bomb exploded near a gathering of daily laborers in the Allawi area near the fortified Green Zone where government offices are located, killing five people and wounding 13. In eastern Baghdad, seven people were killed and 15 others were wounded when a car bomb went off near a traffic police office in Baladiyat neighborhood. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>

<<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= ======= <<<<<<< What company are you calling from? https://mail.ienuestrasenoradelperpetuosocorro.edu.co/pharmacy/albuterol-90-mcginh-inhalation-aerosol-price-mnjk.pdf how long is albuterol good for after expiration date "I'm going to stick to it, to get ready for when it really counts, which is in April and May and definitely we're trying to play in June, so I'm not trying to burn myself out and pressing the issue about playing seven games in 10 nights, or five games in seven nights. I'm not going to press that issue. I understand what it is. The games they need me, they want me out there, I'm a go. And the preseason doesn't count." ======= <<<<<<< Will I get paid for overtime? http://www.astroadhesives.com/clopidogrel-actavis-75-mg-hinta-ekud atorvastatin 10mg clopidogrel 75 mg brands The document, which wraps up a preliminary investigation started in October 2011 and was sent to all the parties involved, says the alleged crime was committed "in the interest and to the benefit of JP Morgan". ======= <<<<<<< Best Site Good Work http://jaw-bone.net/pharmacy/vitamin-b12-ampule-cijena-mnjk.pdf vitamin b12 spritze beim arzt kosten “I want to get my jaw seen to, and then we’ll probably fight Raymundo again,” said Burns. “From the second round onwards, I was just trying to protect my jaw because I knew it was damaged.” ======= <<<<<<< How do you do? https://themarstrendz.com/pharmacy/calcium-carbonate-tablets-uses-janj.pdf alfacalcidol and calcium carbonate brand name They needed someone who knows having access to A-Rod is good for radio ratings. Most importantly, they needed someone arrogant enough to dismiss all dissenting opinions — someone with an extremely large listening audience and an even larger ego. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>

<<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= <<<<<<< ======= ======= When do you want me to start? https://melorncekavukatema.com/pharmacy/aleksandr-toproll-arm-wrestling-ekud.pdf para que es el metoprolol tartrate 25 mg That’s the decision a judge handed down Monday against John Henry Spooner, the Milwaukee man who gunned down his 13-year-old neighbor after accusing the teen of robbery. The blatant broad-daylight killing of Darius Simmons, ironically, was all caught on Spooner’s own surveillance camera system, which gave prosecutors indisputable evidence. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>

PmWiki /

Security

Aspects of PmWiki security are found on the following pages:

Pages distributed in a PmWiki release:

  • Page history History of previous edits to a page
  • Passwords General use of passwords and login
  • Passwords Admin More password options for the administrator
  • AuthUser Authorization system that uses usernames and passwords
  • Url Approvals Require approval of Url links
  • Site Analyzer
  • Blocklist Blocking IP addresses, phrases, and expressions to counteract spam and vandalism.
  • Notify How to receive email messages whenever pages are changed on the whole wiki site, individual groups or selected watchlists of pages
  • Security variables variables crucial for site security

Cookbook pages

How do I report a possible security vulnerability of PmWiki?

Pm wrote about this in a post to pmwiki-users from September 2006. In a nutshell he differentiates two cases:

  1. The possible vulnerability isn't already known publicly: In this case please contact us by private mail.
  2. The possible vulnerability is already known publicly: In this case feel free to discuss the vulnerability in public (e.g. on pmwiki-users or in the PITS).

See his post mentioned above for details and rationals.

What about the botnet security advisory at http://isc.sans.org/diary.php?storyid=1672?

Sites that are running with PHP's register_globals setting set to "On" and versions of PmWiki prior to 2.1.21 may be vulnerable to a botnet exploit that is taking advantage of a bug in PHP. The vulnerability can be closed by turning register_globals off, upgrading to PmWiki 2.1.21 or later, or upgrading to PHP versions 4.4.3 or 5.1.4.
In addition, there is a test at PmWiki:SiteAnalyzer that can be used to determine if your site is vulnerable.

Wiki Vandalism and Spam

Assumptions
you are using a Blocklist and Url approvals.
You don't want to resort to password protecting the entire wiki, that's not the point after all.
Ideally these protections will be invoked in config.php

How do I stop pages being deleted, eg password protect a page from deletion?

Use Cookbook:DeleteAction and password protect the page deletion action by adding $DefaultPasswords['delete'] = '*'; to config.php or password protect the action with $HandleAuth['delete'] = 'edit';

or $HandleAuth['delete'] = 'admin'; to require the edit or admin password respectively.

How do I stop pages being replaced with an empty (all spaces) page?

Add block: /^\s*$/ to your blocklist.

how do I stop pages being completely replaced by an inane comment such as excellent site, great information, where the content cannot be blocked?

Try using the newer automatic blocklists that pull information and IP addresses about known wiki defacers.

(OR) Try using Cookbook:Captchas or Cookbook:Captcha (note these are different).

(OR) Set an edit password, but make it publicly available on the Site.AuthForm template.

How do I password protect the creation of new groups?

See Cookbook:Limit Wiki Groups

How do I password protect the creation of new pages?

See Cookbook:Limit new pages in Wiki Groups

How do I take a whitelist approach where users from known or trusted IP addresses can edit, and others require a password?

Put these lines to local/config.php: 

## Allow passwordless editing from own turf, pass for others.
if ($action=='edit'
 && !preg_match("/^90\\.68\\./", $_SERVER['REMOTE_ADDR']) )    
 { $DefaultPasswords['edit'] = pmcrypt('foobar'); }

Replace 90.68. with the preferred network prefix and foobar with the default password for others.

For a single IP, you may use 

if($_SERVER['REMOTE_ADDR'] == '127.0.0.1') { # your IP address here
 $_POST['authpw'] = 'xxx';                  # the admin password
}

Please note the security issues : this means that you have your admin passwords in clear in config.php and someone with access to the filesystem can read them (for example a technician of your hosting provider) ; your IP address may change from time to time (unless you have a fixed IP contract with your ISP). When that happens, someone with your old IP address will be logged in automatically as admin on your wiki. It is extremely unlikely to become a problem, but you should know it is possible ; if you are behind a router, all other devices which pass through that router will have the same IP address for PmWiki - your wifi phone, your wife's netbook, a neighbour using your wifi connection, etc. All these people become admins of your wiki. Again, you should evaluate if this is a security risk ; In some cases, your ISP will route your traffic through the same proxy as other people. In such a case, thousands of people may have the same IP address.

See also Cookbook:AuthDNS & Cookbook:PersistentLogin

How do I password protect page actions?

See Passwords for setting in config.php

$HandleAuth['pageactionname'] = 'pageactionname'; # along with :
$DefaultPasswords['pageactionname'] = pmcrypt('secret phrase');

or

$HandleAuth['pageactionname'] = 'anotherpageactionname';

How do I moderate all postings?

Enable PmWiki.Drafts

  • Set $EnableDrafts, this relabels the "Save" button to "Publish" and a "Save draft" button appears.
  • Set $EnablePublishAttr, this adds a new "publish" authorization level to distinguish editing from publishing.

How do I make a read only wiki?

In config.php set an "edit" password.

How do I restrict access to uploaded attachments?

See

How do I hide the IP addresses in the "diff" pages?

If the user fills an author name, the IP address is not displayed. To require an author name, set in config.php such a line: 

  $EnablePostAuthorRequired = 1;

The IP address can also be seen in a tooltip title when the mouse cursor is over the author name. To disable the tooltip, set in config.php: 

$DiffStartFmt = 
  "<div class='diffbox'><div class='difftime'><a name='diff\$DiffGMT' href='#diff\$DiffGMT'>\$DiffTime</a>
   \$[by] <span class='diffauthor'>\$DiffAuthor</span> - \$DiffChangeSum</div>";

How do I stop some Apache installations executing a file which has ".php", ".pl" or ".cgi" anywhere in the filename

Use $UploadBlacklist

How do I stop random people from viewing the ?action=source (wiki markup) of my pages? I have (:if auth edit:) text that I don't want the world to see.

$HandleAuth['source'] = 'edit'; or $HandleAuth['source'] = 'admin';

How to I secure my cookies?

See $EnableCookieSecure and $EnableCookieHTTPOnly


This page may have a more recent version on pmwiki.org: PmWiki:Security, and a talk page: PmWiki:Security-Talk.

Edit - History - Print - Recent Changes - Search
Page last modified on December 02, 2018, at 04:50 AM