Re: [Tiki-devel] Security setting and php.ini

This would work only if the ini file was a *.php file in fact, right?

Dne 06.02.2022 v 9:03 Bernard Sfez via TikiWiki-devel napsal(a):
> Hello,
>
> (Playing a little out of my league).
>
> For a Tiki new admin I searched and reviewed some information about System Configuration and Risky Preferences.
> I updated some doc pages and found something I didn’t noticed before at : https://doc.tiki.org/System-Configuration?latest=1&no_bl=y#Protecting_ini_file_content_when_stored_in_a_location_accessible_from_the_web
>
> That suggest adding this to the file:
>
> <?php
> // This script may only be included - so it is better to die if called directly.
> // Keep this block to avoid the content to be read from the internet.
> if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) !== false) {
> 	header('location: index.php');
> 	exit;
> }
> ?>
>
> When I did on 2 Tiki to test I ended with WSoD so I removed it and the Tiki worked back.
>
> Is the information on Tiki doc correct ?
> Subject to specific installation ?
> Outdated ?
>
> Thanks to help clarify.
> Bernard
>
>
>
>
> _______________________________________________
> TikiWiki-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


_______________________________________________
TikiWiki-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel