ikiwiki/doc/plugins/attachment.mdwn

[[!template id=plugin name=attachment core=0 author="[[Joey]]"]]
[[!tag type/web]]

This plugin allows files to be uploaded to the wiki over the web.

For each page `foo`, files in the subdirectory `foo/` are treated as
attachments of that page. Attachments can be uploaded and managed as
part of the interface for editing a page.

Warning: Do not enable this plugin on publically editable wikis, unless you
take care to lock down the types and sizes of files that can be uploaded.
Bear in mind that if you let anyone upload a particular kind of file
("*.mp3" files, say), then someone can abuse your wiki in at least three ways:

1. By uploading many mp3 files, wasting your disk space.
2. By uploading mp3 files that attempt to exploit security holes
   in web browsers or other players.
3. By uploading files that claim to be mp3 files, but are really some 
   other kind of file. Some web browsers may display a `foo.mp3` that
   contains html as a web page; including running any malicious javascript
   embedded in that page.

If you enable this plugin, be sure to lock it down, via the
`allowed_attachments` setup file option. This is a special 
[[enhanced_PageSpec|ikiwiki/pagespec/attachment]] using tests provided by
the [[filecheck]] plugin. That plugin will be automatically enabled when
this plugin is enabled.
Migrate doc/plugins via prefix_directives This is a partial commit of: egrep -rl '\[\[[a-z]+ ' doc \| xargs --max-args 1 ./ikiwiki-transition prefix_directives 2008-07-21 13:31:57 +02:00			`[[!template id=plugin name=attachment core=0 author="[[Joey]]"]]`
tag updates 2008-10-09 22:58:25 +02:00			`[[!tag type/web]]`
basic attachment plugin, unfinished Currently includes UI, and a few tests of the attachment, as well as the framework to extend pagespecs to test attachments. Does not actually save the file yet. 2008-07-01 04:58:33 +02:00
despam 2015-01-10 12:23:05 +01:00			`This plugin allows files to be uploaded to the wiki over the web.`

basic attachment plugin, unfinished Currently includes UI, and a few tests of the attachment, as well as the framework to extend pagespecs to test attachments. Does not actually save the file yet. 2008-07-01 04:58:33 +02:00			For each page `foo`, files in the subdirectory `foo/` are treated as
			`attachments of that page. Attachments can be uploaded and managed as`
			`part of the interface for editing a page.`

			`Warning: Do not enable this plugin on publically editable wikis, unless you`
			`take care to lock down the types and sizes of files that can be uploaded.`
			`Bear in mind that if you let anyone upload a particular kind of file`
			`("*.mp3" files, say), then someone can abuse your wiki in at least three ways:`

			`1. By uploading many mp3 files, wasting your disk space.`
			`2. By uploading mp3 files that attempt to exploit security holes`
			`in web browsers or other players.`
			`3. By uploading files that claim to be mp3 files, but are really some`
			other kind of file. Some web browsers may display a `foo.mp3` that
			`contains html as a web page; including running any malicious javascript`
			`embedded in that page.`

admin prefs move to setup file, stage 1 The locked pages configuration is moving to a locked_pages option in the setup file, and the allowed attachments configuration to allowed_attachments. The admin prefs page can still be used for these, but that's depreacted and will only be shown if there's currently a value. 2008-08-01 21:45:57 +02:00			`If you enable this plugin, be sure to lock it down, via the`
			`allowed_attachments` setup file option. This is a special
filecheck: New plugin factoring out the PageSpec additions that were originally part of the attachment plugin. 2008-08-26 01:52:34 +02:00			`[[enhanced_PageSpec\|ikiwiki/pagespec/attachment]] using tests provided by`
despam 2015-01-10 12:23:05 +01:00			`the [[filecheck]] plugin. That plugin will be automatically enabled when`
filecheck: New plugin factoring out the PageSpec additions that were originally part of the attachment plugin. 2008-08-26 01:52:34 +02:00			`this plugin is enabled.`