MediaWiki/Sicherheit

Mediawiki absichern

Hier eine kleine Anleitung wie man den Anonymous Benutzern, also den nicht eingeloggten Mediawiki Benutzern so gut es geht die Rechte im Wiki entzieht.

• Lockdown Extension

LocalSettings.conf

1. E-Mail adress valididation

$wgEmailConfirmToEdit = true;

1. Prevent new user registrations except by sysops

$wgWhitelistAccount = array ( "user" => 0, "sysop" => 1, "developer" => 1 ); $wgGroupPermissions['*']['createaccount'] = false;

1. Disable anonymous editing and talk

$wgGroupPermissions['*']['edit'] = false; $wgDisableAnonTalk = true;

1. Anonymous users can't create pages

$wgGroupPermissions['*']['createpage'] = false; $wgShowIPinHeader = false;

1. Enable Lockdown Extension

wfLoadExtension( 'Lockdown' ); $wgSpecialPageLockdown['Version'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Export'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Listfiles'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Listusers'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Statistics'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Booksources'] = array('user', 'bureaucrat', 'sysop'); $wgSpecialPageLockdown['Protectedpages'] = array('user', 'bureaucrat', 'sysop'); $wgActionLockdown['history'] = array('user', 'bureaucrat', 'sysop'); $wgActionLockdown['edit'] = array('user', 'bureaucrat', 'sysop');