Extension:SecureProperties
From MediaWiki.org
For further details, see Security issues with authorization extensions
|
SecureProperties Release status: stable |
|
|---|---|
| Implementation | Parser extension |
| Description | |
| Author(s) | Jean-Lou Dupont |
| Version | 1.0.0 |
| MediaWiki | 1.10, 1.11 |
| Download | SVN See SVN ($Id: SecureProperties.doc.wikitext 494 2007-10-10 17:09:08Z jeanlou.dupont $) |
Contents |
[edit] Purpose
Enables getting/setting global object properties securily (operations are only allowed on protected pages).
[edit] Usage
- Property 'get': {{#pg:global object name|property}}
- Property 'set': {{#ps:global object name|property|value}}
- Method call: {{#pf:global object name|method name}}
- Global variable 'get': {{#gg:global object name}}
- Global variable 'set': {{#gs:global object name|value}}
- Class static property 'get': {{#cg:class name|property}}
- Class static property 'set': {{#cs:class name|property|value}}
(($disable$))
[edit] Notes
Of course, those functions can be called in the context of 'ParserPhase2':
- Property 'get': (($#pg|global object name|property$))
- Property 'set': (($#ps|global object name|property|value$))
- Method call: (($#pf|global object name|method name$))
- Global variable 'get': (($#gg:global object name$))
- Global variable 'set': (($#gs:global object name|value$))
- Class static property 'get': (($#cg:class name|property$))
- Class static property 'set': (($#cs:class name|property|value$))
(($enable$))
[edit] Examples
Current user name: {{#pg:wgUser|mName}}
Current user id: {{#pg:wgUser|mId}}
[edit] Features
- Security: the 'magic words' of the extension can only be used on protected pages
- Namespace exemption: configured namespaces are exempted from the 'protection' requirement
[edit] Dependancy
[edit] Installation
See the Mediawiki Extension table entry "download" above.[1]
[edit] LocalSettings.php
Extension:ExtensionManager: See footnote[2]
- Add the following to LocalSettings.php if the extension was downloaded from Jean-Lou Dupont's MediaWiki SVN directory (link in the download entry of the table above)[2]:
require_once( "$IP/extensions/SecureProperties/SecureProperties.php" );
[edit] PEARPEAR is a repository of software code.
require 'MediaWiki/SecureProperties/SecureProperties.php';
[edit] Upgrades through PEARSometimes, it is necessary to clear PEAR's cache in order to perform upgrades.
or use the force method:
[edit] PEAR Web FrontendFor easier remote package management, PEAR Frontend WEB can be installed. Installation notes can be found here. An example of the WEB frontend is available here. |
[edit] RSS feed
To keep kept up-to-date with this channel, use the following RSS feed
.
[edit] Notes
[edit] Sandbox
You are invited in the author's sandbox to try-out some of his extensions.
[edit] Other Extensions From the same author
Consult User Jldupont's page.
- ↑ The most recent release is always available through the extension's PEAR and SVN repositories. This page is not necessarily up-to-date.
- ↑ 2.0 2.1 2.2 Extension:ExtensionManager does not require any modification to LocalSettings.php because ExtensionManager includes the extension.
Note that if PHP code caching is in place (e.g. APC, eAccelerator), then to successfully complete the installation a cache flush might be needed. - ↑ Modifications to
LocalSettings.phpis only necessary if not using Extension:ExtensionManager
[edit] History
- added '#gg' and '#gs' magic words
- Removed dependency on ExtensionClass
- Added '#cg' and '#cs' to deal with static properties in classes
- Added 'addExemptNamespaces' function
[edit] Todo
- Fix for 'exempt' namespaces option even considering StubManager

