Loading...
 
Skip to main content

Architecture / Installation

Forum List Topic List

 
Thread actions
Print this page
  • Print all pages

    • TikiWiki security problem?

    Posted by Josephine Tan

    What are common tw security problems? How can we safeguard our tw sites from being sabotaged by others? ❓

    Reads: 1555
    Posted by Damian Parker

    Hi,

    Always keep upto date with the latest TikiWiki release. And protect your Apache with a .htaccess file to disallow access to files and folders, that shouldnt really be in the docroot.

    Examples and details of these are within the articles on tikiwiki.org.

      • Make sure you are running at least 1.9.2 minimum! All previous releases are insecure. 1.8 releases are no longer maintained and should be upgraded to 1.9.2 with immediate effect.


    Cheers

    Damian

    p.s. Ta for the nudge 😉

    Posted by Josephine Tan

    > Always keep upto date with the latest TikiWiki release. And protect your Apache with a .htaccess file to disallow access to files and folders, that shouldnt really be in the docroot.
    >
    > Examples and details of these are within the articles on tikiwiki.org.
    Don't quite understand. Have looked at http://tikiwiki.org/tiki-index.php?page=TikiSecurity&highlight=securityQuestion

    What does the following mean? Do I simply copy and paste into my .htaccess file?

    AuthType Basic
    AuthUserFile /dev/null
    AuthGroupFile /dev/null
    Require valid-user


    > ** Make sure you are running at least 1.9.2 minimum! All previous releases are insecure. 1.8 releases are no longer maintained and should be upgraded to 1.9.2 with immediate effect.

    Actually, I've already upgraded to 1.9.2. Still...