Loading...
 
Skip to main content

Architecture / Installation

Forum List Topic List

Forums » Architecture / Installation » TikiWiki security problem?
 
Thread actions
Print this page
  • Print all pages

    • TikiWiki security problem?

    Posted by Josephine Tan posts: 84 Singapore

    What are common tw security problems? How can we safeguard our tw sites from being sabotaged by others? ❓

    Reads: 1034
    Posted by Damian Parker posts: 2881 United Kingdom

    Hi,

    Always keep upto date with the latest TikiWiki release. And protect your Apache with a .htaccess file to disallow access to files and folders, that shouldnt really be in the docroot.

    Examples and details of these are within the articles on tikiwiki.org.

      • Make sure you are running at least 1.9.2 minimum! All previous releases are insecure. 1.8 releases are no longer maintained and should be upgraded to 1.9.2 with immediate effect.


    Cheers

    Damian

    p.s. Ta for the nudge 😉

    Posted by Josephine Tan posts: 84 Singapore

    > Always keep upto date with the latest TikiWiki release. And protect your Apache with a .htaccess file to disallow access to files and folders, that shouldnt really be in the docroot.
    >
    > Examples and details of these are within the articles on tikiwiki.org.
    Don't quite understand. Have looked at http://tikiwiki.org/tiki-index.php?page=TikiSecurity&highlight=security

    What does the following mean? Do I simply copy and paste into my .htaccess file?

    AuthType Basic
    AuthUserFile /dev/null
    AuthGroupFile /dev/null
    Require valid-user


    > ** Make sure you are running at least 1.9.2 minimum! All previous releases are insecure. 1.8 releases are no longer maintained and should be upgraded to 1.9.2 with immediate effect.

    Actually, I've already upgraded to 1.9.2. Still...