Re: [Tiki-devel] Security setting and php.ini

Yes dear Luci, I figured that out later and added clarification to the documentation.

Thanks

Bernard

> On 18 Feb 2022, at 17:05, luciash via TikiWiki-devel <[email protected]> wrote:
> 
> This would work only if the ini file was a *.php file in fact, right?
> 
> Dne 06.02.2022 v 9:03 Bernard Sfez via TikiWiki-devel napsal(a):
>> Hello,
>> 
>> (Playing a little out of my league).
>> 
>> For a Tiki new admin I searched and reviewed some information about System Configuration and Risky Preferences.
>> I updated some doc pages and found something I didn’t noticed before at : https://doc.tiki.org/System-Configuration?latest=1&no_bl=y#Protecting_ini_file_content_when_stored_in_a_location_accessible_from_the_web
>> 
>> That suggest adding this to the file:
>> 
>> <?php
>> // This script may only be included - so it is better to die if called directly.
>> // Keep this block to avoid the content to be read from the internet.
>> if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) !== false) {
>> 	header('location: index.php');
>> 	exit;
>> }
>> ?>
>> 
>> When I did on 2 Tiki to test I ended with WSoD so I removed it and the Tiki worked back.
>> 
>> Is the information on Tiki doc correct ?
>> Subject to specific installation ?
>> Outdated ?
>> 
>> Thanks to help clarify.
>> Bernard
>> 
>> 
>> 
>> 
>> _______________________________________________
>> TikiWiki-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
> 
> 
> _______________________________________________
> TikiWiki-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel



_______________________________________________
TikiWiki-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel