[pmwiki-users] Increased recipe security without much hassle (Was: Infected Cookbook Recipes?)

ThomasP pmwikidev2 at sigproc.de
Wed Oct 8 14:01:40 CDT 2008


On Wed, October 8, 2008 9:09 pm, Ian MacGregor wrote:
> I must have missed the first part of this conversation. What exactly is
> the problem?
>

Hi,

there was a discussion going on starting on 21th of Sep, see

http://pmichaud.com/pipermail/pmwiki-users/2008-September/052378.html
http://pmichaud.com/pipermail/pmwiki-users/2008-September/thread.html

The problem is not security of uploads on pmwiki deployments in general
(which indeed could be password protected), but the integrity of files
uploaded to the recipe pages on pmwiki.org (where the current open
permission setup is a "fixed variable" with good reasons).

Thomas




More information about the pmwiki-users mailing list