Re: User Authorization and Page File Creation for non-existent pages

THANKS! Looking at the activity, you've been busy. I really appreciate all
your work on this. I've started migrating to a new server running Alma
Linux 8. My current server is running Centos 6. LOTS of PHP complaints on
PhpWiki. I look forward to trying this new version.

Again, thanks!

Harold



> Hi Harold,
>
> Thank you for your continued interest in PhpWiki.
>
> I have finally the time to publish PhpWiki 1.6.0:
> https://sourceforge.net/p/phpwiki/news/2021/08/phpwiki-160-released/
>
> You might want to upgrade your wiki to this version.
>
> I have added some notes about user authentication in file
> config/config-dist.ini, based on your notes below.
>
> Best regards,
>
> Marc-Etienne
>
> -----Original Message-----
> From: Harold Hallikainen <[email protected]>
> Sent: Monday, July 19, 2021 5:15 AM
> To: Harold Hallikainen <[email protected]>
> Cc: Discussion on PhpWiki features, bugs, development.
> <[email protected]>
> Subject: Re: [Phpwiki-talk] User Authorization and Page File Creation for
> non-existent pages
>
>
> Following up on this, I have a couple solutions.
>
> To get rid of the files for pages that do not exist, I create a zip dump
> of the wiki, move the wiki page files somewhere else as a  backup, do a
> restore from the dump. If all looks good, the moved page files are
> deleted.
>
> I have not dug extensively into the code, but I understand that page
> access data is saved in the wiki page file. If someone tries to access a
> page that does not exist (typically trying to send a command to get
> /etc/passwd), a file is created with that page name to record the access
> even though the page does not exist. I might dig into the code a bit to
> see if I can make an access not create a file.
>
> Second, on using file authentication, after grepping around a bit, I found
> in config.ini
>
> ; File authentication options:
> ;
> ; File to read for authentication information.
> ; Popular choices are /etc/shadow and /etc/httpd/.htpasswd ;
> AUTH_USER_FILE = /etc/shadow AUTH_USER_FILE =
> /home/harold/BhWikiData/users ; above line changed 7/18/21. hh See
> /home/harold/BhWikiData/AddingUsers
> for info.
>
> You can see how I changed the AUTH_USER_FILE. I made notes in
> /home/harold/BhWikiData/AddingUsers to remind me how to add users:
>
> [harold@mai BhWikiData]$ cat AddingUsers User info is kept in
> /home/harold/BhWikiData/users.
>
> To add a user, run the command
>
> htpasswd UserName
>
> where UserName is the user to be added. You will be prompted twice for the
> password.
>
> hh
> 7/18/21
>
>
> I added a test user, and IT WORKED! Hopefully this will help someone else
> using file authentication.
>
> Thanks!
>
> Harold
>
>
>
>
> --
> FCC Rules Updated Daily at http://www.hallikainen.com Not sent from an
> iPhone.
>
>
> _______________________________________________
> Phpwiki-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>
> _______________________________________________
> Phpwiki-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>
>


-- 
FCC Rules Updated Daily at http://www.hallikainen.com
Not sent from an iPhone.