Thanks that was what I needed to know it works great. I don't have a security problem as it sits behind a firewall on a private network
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jan Luca Sent: 16 October 2009 02:26 PM To: 'MediaWiki announcements and site admin list' Subject: Re: [Mediawiki-l] How do you allow zip files uploads Hello, .zip files are locked in $wgMimeTypeBlacklist because .zip can be a security hole. If you really want to enable the upload, add this to LocalSettings.php: $wgMimeTypeBlacklist= array( # HTML may contain cookie-stealing JavaScript and web bugs 'text/html', 'text/javascript', 'text/x-javascript', 'application/x-shellscript', # PHP scripts may execute arbitrary code on the server 'application/x-php', 'text/x-php', # Other types that may be interpreted by some servers 'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh', 'text/x-csh', # Windows metafile, client-side vulnerability on some systems 'application/x-msmetafile', ); $wgFileExtensions[] = 'zip'; Viele Grüße Jan -----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von DaveM Gesendet: Freitag, 16. Oktober 2009 13:55 An: [email protected] Betreff: [Mediawiki-l] How do you allow zip files uploads I need to configure my wiki to allow uploading of zip files. Now I have added it to my LocalSettings.php file. However I see that it is still blacklisted and I need to change this setting in another file. I have done quite a bit of reading up on this but I am still in the dark as to what file I need to edit and what I need to edit into it? _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
