Skip to content

Conversation

@PhilippImhof
Copy link

Fixes #3363

The user can create a file named .disable-security-check-at-my-own-risk in the data directory. If this exists, the function showSecurityCheck will not try to load dont-panic-if-you-see-this-in-your-logs-it-means-your-directory-permissions-are-correct.png anymore. A warning will be shown instead, so the user knows this feature is disabled.

The warning will link to http://www.dokuwiki.org/security#web_access_security; we could probably add a section to that page and have the link point directly to that section.

@splitbrain
Copy link
Collaborator

I am closing this based on the discussion in #3363 - a different approach is needed.

@splitbrain splitbrain closed this Jan 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

showSecurityCheck can trigger IP ban on shared hosting

2 participants