Add cmd, vxd, cpl to upload blacklist

[lhc/web/wiklou.git] / includes / DefaultSettings.php

diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 4d8a7a9..f1b8bf1 100644 (file)
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -39,6 +39,11 @@ $wgDBminWordLen     = 4;
 $wgDBtransactions      = false; # Set to true if using InnoDB tables
 $wgDBmysql4                    = false; # Set to true to use enhanced fulltext search
 
+# Database load balancer
+$wgDBservers           = false; # e.g. array("larousse", "pliny")
+$wgDBloads                     = false; # e.g. array(0.6, 0.4);
+
+
 # memcached settings
 # See docs/memcached.doc
 #
@@ -64,6 +69,7 @@ $wgAmericanDates    = false; # Enable for English module to print dates
                                                         # as eg 'May 12' instead of '12 May'
 $wgLocalInterwiki   = "w";
 $wgShowIPinHeader      = true; # For non-logged in users
+$wgMaxNameChars     = 32; # Maximum number of bytes in username
 
 # Translation using MediaWiki: namespace
 # Not recommended unless memcached is installed
@@ -91,6 +97,14 @@ $wgCompressedPersistentLC = true; # use gzcompressed blobs
 
 $wgEnableParserCache = false; # requires that php was compiled --with-zlib
 
+# wgHitcounterUpdateFreq sets how often page counters should be
+# updated, higher values are easier on the database. A value of 1
+# causes the counters to be updated on every hit, any higher value n
+# cause them to update *on average* every n hits. Should be set to
+# either 1 or something largish, eg 1000, for maximum efficiency.
+
+$wgHitcounterUpdateFreq = 1;
+
 # User rights 
 $wgWhitelistEdit = false;
 $wgWhitelistRead = false;
@@ -124,6 +138,19 @@ $wgFileCacheDirectory = "{$wgUploadDirectory}/cache";
 
 $wgCookieExpiration = 2592000;
 
+# Squid-related settings
+#
+# Enable/disable Squid
+ $wgUseSquid = false;
+# If you run Squid3 with ESI support, enable this (default:false):
+ $wgUseESI = false;
+# Internal server name as known to Squid, if different
+# $wgInternalServer = 'http://yourinternal.tld:8000';
+ $wgInternalServer = $wgServer;
+# A list of proxy servers (ips if possible) to purge on changes
+# don't specify ports here (80 is default)
+# $wgSquidServers = array('127.0.0.1');
+
 # Set to set an explicit domain on the login cookies
 # eg, "justthis.domain.org" or ".any.subdomain.net"
 $wgCookieDomain = "";
@@ -132,6 +159,9 @@ $wgDisableCookieCheck = false;
 
 $wgAllowExternalImages = true;
 $wgMiserMode = false; # Disable database-intensive features
+$wgDisableQueryPages = false; # Disable all query pages if miser mode is on, not just some
+$wgUseWatchlistCache = false; # Generate a watchlist once every hour or so
+$wgWLCacheTimeout = 3600;      # The hour or so mentioned above
 
 # To use inline TeX, you need to compile 'texvc' (in the 'math' subdirectory
 # of the MediaWiki package and have latex, dvips, gs (ghostscript), and
@@ -153,6 +183,7 @@ $wgDisableCounters = false;
 $wgDisableTextSearch = false;
 $wgDisableSearchUpdate = false; # If you've disabled search semi-permanently, this also disables updates to the table. If you ever re-enable, be sure to rebuild the search table.
 $wgDisableUploads = true; # Uploads have to be specially set up to be secure
+$wgRemoteUploads = false; # Set to true to enable the upload _link_ while local uploads are disabled. Assumes that the special page link will be bounced to another server where uploads do work.
 $wgDisableAnonTalk = false;
 
 # We can serve pages compressed in order to save bandwidth,
@@ -171,11 +202,25 @@ $wgCompressRevisions = false;
 
 $wgFileExtensions = array( "png", "jpg", "jpeg", "ogg" );
 
+# Files with these extensions will never be allowed as uploads.
+$wgFileBlacklist = array(
+       # HTML may contain cookie-stealing JavaScript and web bugs
+       "html", "htm",
+       # PHP scripts may execute arbitrary code on the server
+       "php", "phtml", "php3", "php4", "phps",
+       # Other types that may be interpreted by some servers
+       "shtml", "jhtml", "pl", "py",
+       # May contain harmful executables for Windows victims
+       "exe", "scr", "dll", "msi", "vbs", "bat", "com", "pif", "cmd", "vxd", "cpl" );
+
 # This is a flag to determine whether or not to check file extensions on
 # upload.
-
 $wgCheckFileExtensions = true;
 
+# If this is turned off, users may override the warning for files not
+# covered by $wgFileExtensions.
+$wgStrictFileExtensions = true;
+
 $wgPasswordSalt = true; # For compatibility with old installations set to false
 
 # Which namespaces should support subpages?
@@ -190,4 +235,7 @@ $wgNamespacesToBeSearchedDefault = array( -1 => 0, 0 => 1, 1 => 0,
 # If set, a bold ugly notice will show up at the top of every page.
 $wgSiteNotice = "";
 
+# Whether to allow anonymous users to set changes to 'minor'
+
+$wgAllowAnonymousMinor = false;
 ?>