• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use View topic Item7848 for generic doc work for TWiki-6.1.1. Use View topic Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
Does this site look broken?. Use the LitterTray web for test cases.

Item7378: Add warning to twiki/index.html to not put TWiki in HTML document directory

Item Form Data

AppliesTo: Component: Priority: CurrentState: WaitingFor: TargetRelease ReleasedIn
Engine   Normal Closed   patch 6.0.1

Edit Form Data

Summary:
Reported By:
Codebase:
Applies To:
Component:
Priority:
Current State:
Waiting For:
Target Release:
Released In:
 

Detail

TWiki currently has an index.html file in the TWiki root directory. It links to the configure script, implying that TWiki should be in a HTML document enabled directory. This is wrong. For security it is better to put TWiki outside the HTML doc tree, and use Apache configuration to enable twiki/bin as CGI and twiki/pub as HTML doc dir.

-- TWiki:Main/PeterThoeny - 2013-11-08

I simplified index.html and added this note:

ATTENTION: If you can access this page with a browser you have an insecure TWiki installation. Do not put TWiki into an HTML doc enabled directory. Follow the TWiki installation instructions, and use the TWiki Apache config generator to generate the twiki.conf file for the Apache webserver.

-- TWiki:Main.PeterThoeny - 2013-11-09

Related, as a cleanup measure of the twiki root directory, I created a new misc directory and moved all sample files into it: pub-htaccess.txt, robots.txt, root-htaccess.txt, subdir-htaccess.txt, twiki_httpd_conf.txt.

This is now in SVN trunk and 6.0 branch.

-- TWiki:Main.PeterThoeny - 2013-11-09

ItemTemplate
Summary Add warning to twiki/index.html to not put TWiki in HTML document directory
ReportedBy TWiki:Main.PeterThoeny
Codebase ~twiki4, 6.0.0
SVN Range TWiki-6.0.0, Mon, 14 Oct 2013, build 26523
AppliesTo Engine
Component

Priority Normal
CurrentState Closed
WaitingFor

Checkins TWikirev:26583 TWikirev:26584 TWikirev:26585 TWikirev:26586 TWikirev:26587 TWikirev:26588 TWikirev:26589 TWikirev:26590
TargetRelease patch
ReleasedIn 6.0.1
Edit | Attach | Watch | Print version | History: r11 < r10 < r9 < r8 < r7 | Backlinks | Raw View |  Raw edit | More topic actions
Topic revision: r11 - 2014-10-06 - PeterThoeny
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback