Mediawiki security

[Namesniper]

Has anyone tried Mediawiki wiki script and heard anything about its security ?

I am wondering how secure that script is.

[TwistMyArm]

You've got to assume it's relatively secure... I haven't heard too many cases of wikipedia.org being hacked!

[macromind]

it is fairly secure but I had to put a .htaccess to make realy secure...

macromind

[Namesniper]

Which instructions you have put there ?

[penagate]

G'day

I used the rewrite trick same as Wikipedia.

RewriteEngine On
RewriteRule ^wiki/(.*)$ wiki_data/index.php?title=$1 [L,QSA]


wiki_data being the folder containing the actual Mediawiki installation. You will also need to edit the localconfig file to reflect the rewritten article base URL.

Note that this doesn't stop people going in through the non-rewritten URL so it's no improvement on security. That having been said I believe MediaWiki is pretty solid.

Regards
- P

[Namesniper]

Thanks for info