MediaWiki/Sicherheit

Mediawiki absichern

Hier eine kleine Anleitung wie man den Anonymous Benutzern, also den nicht eingeloggten Mediawiki Benutzern so gut es geht die Rechte im Wiki entzieht.

• Lockdown Extension

LocalSettings.conf

# E-Mail adress valididation
$wgEmailConfirmToEdit = true;

# Prevent new user registrations except by sysops
$wgWhitelistAccount = array ( "user" => 0, "sysop" => 1, "developer" => 1 );
$wgGroupPermissions['*']['createaccount'] = false;

# Disable anonymous editing and talk
$wgGroupPermissions['*']['edit'] = false;
$wgDisableAnonTalk = true;

# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;
$wgShowIPinHeader = false;

# Enable Lockdown Extension
wfLoadExtension( 'Lockdown' );
$wgSpecialPageLockdown['Version'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Export'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Listfiles'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Listusers'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Statistics'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Booksources'] = array('user', 'bureaucrat', 'sysop');
$wgSpecialPageLockdown['Protectedpages'] = array('user', 'bureaucrat', 'sysop');
$wgActionLockdown['history'] = array('user', 'bureaucrat', 'sysop');
$wgActionLockdown['edit'] = array('user', 'bureaucrat', 'sysop');