Podręcznik:$wgWhitelistRead

From mediawiki.org
This page is a translated version of the page Manual:$wgWhitelistRead and the translation is 31% complete.
User rights, access control and monitoring: $wgWhitelistRead
Pages anonymous user may see.
Wprowadzono w wersji:1.1.0
Usunięto w wersji:nadal w użyciu
Dozwolone wartości:(array of page names) or false
Domyślna wartość:false
Uwaga Uwaga: MediaWiki w wersji od 1.32 do 1.35.4, 1.36.2 i 1.37.0 zawiera problem w zabezpieczeniach, który pozwala na nieuprzywilejowane edytowanie dowolnej strony i wykonywanie dowolnych skryptów JavaScript. Jeśli używasz jednej z tych wersji i nie możesz zaktualizować do nowszej wersji, zobacz 2021-12 zwolnienie bezpieczeństwa/FAQ , jak to rozwiązać.

Szczegóły

If a group of users is blocked from viewing the wiki by using the $wgGroupPermissions configuration parameter...

$wgGroupPermissions[...]['read'] = false;

...you may still want them to be able to view certain key pages, in particular the main page! This setting holds an array of page names that all users are allowed to view, regardless of their group permissions.

A recommended minimum which allows everyone to view the home page and the login screen as well as loading CSS/JS customizations is as follows:

MediaWiki ≥ 1.18.1[1]
$wgWhitelistRead = [
    'Main Page',
    'MediaWiki:Common.css',
    'MediaWiki:Common.js'
    ];
"Main Page" uses spaces instead of underscores between words.
Uwaga Uwaga: If you are using a content language other than English, you may need to use the translated special page names instead of their English names.

Zobacz też

Przypisy

  1. Starting with r105428 "Special:PasswordReset" is always whitelisted just like "Special:UserLogin" and "Special:ChangePassword".