The following are insecure settings.
==Enabling upload and execution of arbitrary PHP scripts==
<source lang="php">
$wgStrictFileExtensions = false;
$wgFileBlacklist = array();
$wgVerifyMimeType = false;
</source>
This site is not affiliated with or endorsed in any way by the Wikimedia Foundation or any of its affiliates. In fact, we fucking despise them.
|