Disable $wgServer autodetection to prevent cache poisoning attacks

[lhc/web/wiklou.git] / includes / installer / CliInstaller.php

diff --git a/includes/installer/CliInstaller.php b/includes/installer/CliInstaller.php
index 0ff34b0..6f39f01 100644 (file)
--- a/includes/installer/CliInstaller.php
+++ b/includes/installer/CliInstaller.php
@@ -277,7 +277,8 @@ class CliInstaller extends Installer {
        }
 
        protected function envGetDefaultServer() {
-               return null; // Do not guess if installing from CLI
+               // Use a basic value if the user didn't pass in --server
+               return 'http://localhost';
        }
 
        public function dirIsExecutable( $dir, $url ) {