This page will attempt to summarize some of the more commonly asked questions. The answers are on the corresponding pages (see link). If you have a question which isn't answered here, you can leave your question on the Questions page or search for documentation using the search facility. More documentation can be found on the documentation index page.
Introduction
What is Pm Wiki?
Pm Wiki is a wiki-based system for collaborative creation and maintenance of websites. See PmWiki.
What can I do with it?
Pm Wiki pages look and act like normal web pages, except they have an "Edit" link that makes it easy to modify existing pages and add new pages into the website, using basic editing rules. You do not need to know or use any HTML or CSS. Page editing can be left open to the public or restricted to small groups of authors. Feel free to experiment with the Text Formatting Rules in the "Wiki sandbox". The website you're currently viewing is built and maintained with Pm Wiki.
What are the requirements?
See the PmWiki requirements page.
Where can I find documentation?
See the documentation index page.
How can I download Pm Wiki?
See the download page.
How do I install Pm Wiki?
Instructions for installation are on the installation page.
How do I get help with Pm Wiki?
See Mailing lists and How to get assistance.
How do you pronounce "Michaud"?
"Michaud" is french pronounced "mee show", the trailing D is silent.
Basic PmWiki editing rules
I'm new to Pm Wiki, where can I find some basic help for getting started?
The Basic Editing page is a good start. From there, you can just follow the navigational links at the top or the bottom of the page (they are called Wiki Trails) to the next pages, or to the Documentation Index page, which provides an outline style index of essential documentation pages, organized from basic to advanced.
How do I include special characters such as Copyright (©) and Trademark (® or ™) on my wiki pages?
See special characters on how to insert special characters that don't appear on your keyboard.
How can I preserve line-breaks from the source text?
Pm Wiki normally treats consecutive lines of text as being a paragraph, and merges and wraps lines together on output. This is consistent with most other wiki packages. An author can use the (:linebreaks:)
directive to cause the following lines of markup text in the page to be kept as separate lines in the output. Or a wiki administrator can set in config.php
to force literal new lines for the whole site.
$HTMLPNewline
= '<br/>';
Can I just enter HTML directly?
By default (and by design), Pm Wiki does not support the use of HTML elements in the editable markup for wiki pages. There are a number of reasons for this described in the PmWiki Philosophy and Audiences. Enabling HTML markup within wiki pages in a collaborative environment may exclude some potential authors from being able to edit pages, and pose a number of display and security issues. However, a site administrator can use the Cookbook:Enable HTML recipe to enable the use of HTML markup directly in pages.
Where can I find more documentation?
See the documentation index and the markup master index pages.
Creating New Pages
How do I create a new page?
Typing [[my new page]] will create a link to the new page. There's a lot you can do with double bracket links.
Why do some new pages have a title with spaces like "Creating New Pages" and others end up with a Wiki Word-like title like "Creating New Pages"?
The default page title is simply the name of page, which is normally stored as "Creating New Pages." However, you can override a page's title by using the (:title Creating New Pages:)
directive. This is especially useful when there are special characters or capitalization that you want in the title that cannot be used in the page name.
Links
How do I create a link that will open as a new window?
Use the %newwin%
wikistyle, as in:
%newwin% http://example.com/ %% |
How do I create a link that will open a new window, and configure that new window?
This requires javascript. See Cookbook:PopupWindow.
How do I place a mailing address in a page?
Use the mailto:
markup, as in one of the following:
* mailto:myaddress@example.com * [[mailto:myaddress@example.com]] * [[mailto:myaddress@example.com | email me]] * [[mailto:myaddress@example.com?subject=Some subject | email me]] |
The markup [[mailto:me@example.com?cc=someoneelse@example.com&bcc=else@example.com&subject=Pre-set Subject&body=Pre-set body | display text]] =]
lets you specify more parameters like the message body and more recipients (may not work in all browsers and e-mail clients).
See also Cookbook:DeObMail for information on protecting email addresses from spammers.
How can I enable links to other protocols, such as nntp:, ssh:, xmpp:, etc?
How do I make a Wiki Word link to an external page instead of a Wiki Page?
Use link markup. There are two formats:
[[http://example.com/ | WikiWord]] [[WikiWord -> http://example.com/]]
How do I find all of the pages that link to another page (i.e., backlinks)?
In the wiki search form, use link=Group.Page
to find all pages linking to Group.Page.
Use the link=
option of the (:pagelist:)
directive, as in
(:pagelist link=SomePage list=all:) -- show all links to SomePage (:pagelist link={$FullName} list=all:) -- show all links to the current page
What link schemes does Pm Wiki support?
How do I open external links in a new window or mark them with an icon?
How can I use an image as a link?
Use [[Page| Attach:image.jpg ]] or [[ http://site | http://site/image.jpg ]] See Images#links
Why my browser does not follow local file:// links?
For security reasons, most browsers will only enable file:// links if the page containing the link is itself on the local drive. In other words, most browsers do not allow links to file:// from pages that were fetched using http:// such as in a Pm Wiki site. See also Cookbook:DirList for a workaround.
Images
Is it possible to link an image on Pm Wiki without using a fully qualified URL?
Yes. For images that are attachments, the general format is Attach:Groupname./image.gif
. To link to an image that is on the same server, use Path:/path/to/image.gif
.
Can I attach a client image file on Pm Wiki?
Yes, see Uploads .
How can I include a page from another group that contains an attached image?
Include the page in the normal way, ie (:include GroupName.Pagename:)
. In the page to be included (that contains the image) change Attach:filename.ext
to Attach:{$Group}./filename.ext
.
Why, if I put an image with rframe or rfloat and immediatly after that I open a new page section with ! the section title row is below the image instead of on the left side?
Because the CSS for headings such as ! contains an element clear:both which forces this behaviour. Redefine the CSS locally if you want to stop this happening, but I think the bottom border (that underlines the heading) would need further re-definition. I just use bolding for the title, and 4 dashes below ---- to separate a new section, and it saves the effort of fiddling with the core definitions.
Unlike the lframe and rframe directives, cframe does not fully honour the width setting. While the frame itself resizes to match the request, the enclosed image does not, and retains its original width. Effect is the same in IE and Fx. I've added an example beneath the standard example above.
Is it possible to disallow all images? I already disabled uploads but I also want to disallow external images from being shown on my wiki pages.
Yes, add to config.php:
DisableMarkup('img'); $ImgExtPattern = "$^";
How can I make it so that when I place an image in a page, the block of text it is in is a <p> (paragraph) rather than a <div> (division)?
If you just want it to happen for a single image (instead of all), then
try putting [==]
at the beginning of the line, as in:
[==] http://www.pmwiki.org/pub/pmwiki/pmwiki-32.gif
Having [==]
at the beginning of a line forces whatever follows to
be part of a paragraph.
Is there any way to use relative paths for images?
See Cookbook:RelativeLinks and $EnableLinkPageRelative
.
Is there a way to attach a BMP and have it display rather than link?
Add to config.php the following line:
$ImgExtPattern = "\\.(?:gif|jpg|jpeg|png|bmp|GIF|JPG|JPEG|PNG|BMP)";
Note that BMP images are uncompressed and quite heavy. You may wish to convert them to PNG (lossless) or JPG (lossy) format, and thus reduce 5-20 times their filesizes.
Is there a way to have a table to the left or right of an image?
Yes, see TableAndImage.
Uploads
When I upload a file, how do I make the link look like "file.doc" instead of "Attach:file.doc"?
Use parentheses, as in [[(Attach:)file.doc]]
. There is also a configuration change that can eliminate the Attach:
-- see Cookbook:AttachLinks.
Why can't I upload files of size more than 50kB to my newly installed Pm Wiki?
Out of the box Pm Wiki limits the size of files to be uploaded to 50kB. Add
$UploadMaxSize
= 1000000; # limit upload file size to 1 megabyte
Why does my upload exit unexpectedly with "Incomplete file received"?
You may be running out of space in a 'scratch' area, used either by Pm Wiki or by PHP. On *nix, check that you have sufficient free space in /tmp and /var/tmp.
How do I make it so that the upload link still allows one to make another upload (if someone wants to replace the old version of a file with a newer version, for example). Currently you only get the upload link when there is no file in the upload directory.
Use the Attach page action, and click on the delta symbol (Δ) shown against each of files listed. If you can't see the attach action either uploads are not enabled, you are not authorized to upload, or the attach action has been commented out or is missing. See also available actions.
How do I hide the "Attach:" for all attachments
See Cookbook:AttachLinks, note that this does not currently work for [[Attach:my file.ext]]
.
How can I link a file that have a 4-letter file extension such like 'abc.pptx'?
How can I prevent others from using the url's of my images on their site
Tables
How do I create a basic table?
Tables are created via use of the double pipe character: ||
. Lines beginning with this markup denote rows in a table; within such lines the double-pipe is used to delimit cells. In the examples below a border is added for illustration (the default is no border).
|| border=1 rules=rows frame=hsides || cell 1 || cell 2 || cell 3 || || cell 1 || cell 2 || cell 3 || |
|
How do I create cell headers?
Header cells can be created by placing ! as the first character of a cell. Note that these are table headers, not headings, so it doesn't extend to !!, !!!, etc.
|| border=1 rules=cols frame=vsides ||! cell 1 ||! cell 2 ||! cell 3 || || cell 1 || cell 2 || cell 3 || |
|
How do I obtain a table with thin lines and more distance to the content?
"Thin lines" is tricky and browser dependent, but the following works for Firefox and IE (Nov. 2009):
||border="1" style="border-collapse:collapse" cellpadding="5" width=66% ||!Header ||! Header || '''Header'''|| ||cells || with || padding|| || || || || |
|
How do I create an advanced table?
See table directives
My tables are by default centered. When I try to use '||align=left' they don't align left as expected.
Use ||style="margin-left:0px;" instead.
How can I specify the width of columns?
You can define the widths via custom styles, see Cookbook:FormattingTables and $TableCellAttrFmt
. Add in config.php :
$TableCellAttrFmt = 'class=col$TableCellCount';
table.column td.col1 { width: 120px; } table.column td.col3 { width: 40px; }
How can I display a double pipe "||" in cell text using basic table markup?
Escape it with [=||=]
to display || unchanged.
How to I apply styles to the elements of the table, like an ID to the table row, or a class/style to the TD?
See $WikiStyleApply.
Table directives
Can I define table headers using the table directive markup?
Yes, with Pm Wiki version 2.2.11 or newer. See also Cookbook:AdvancedTableDirectives.
Is it possible to do nested tables?
Yes, if you nest simple tables inside advanced tables. See also Cookbook:AdvancedTableDirectives.
Is it possible to add background images to tables and table cells?
Yes, see Cookbook:BackgroundImages.
Is it possible to apply styles to the elements of the table, like an ID to the table row, or a class/style to the TD?
Yes, see $WikiStyleApply.
Is it possible to automatically generate columns or rows in tables, i.e. without having to do a lot of counting?
Yes, this is possible with the Cookbook:CreateColumns recipe - it allows you to specify a certain number of columns, and/or to specify a certain number of items per column. Plus, someone has provided some similar markup on the TableDirectives-Talk page.
Access Keys
How can I change the keyboard shortcuts for editing and saving a page?
Page Directives
Can I get (:redirect:)
to return a "moved permanently" (HTTP 301) status code?
Use (:redirect PageName status=301:)
.
Is there any way to prevent the "redirected from" message from showing at the top of the target page when I use (:redirect:)
?
From version 2.2.1 on, set in config.php
and in the page $EnableRedirectQuiet
=1;(:redirect OtherPage quiet=1:)
for a quiet redirect.
Is there any method for redirecting to the equivalent page in a different group, i.e. from Bad Group?/thispage => Good Group?/thispage using similar markup to (:redirect Goodgroup.{Name}:)?
How can a wiki enable linebreaks by default, i.e. without having the directive (:linebreaks:)
in a page or in a Group Header?
Add to config.php such a line:$HTMLPNewline
= '<br/>';
Include Other Pages
What's the maximum number of includes that can exist in a page?
$MaxIncludes
)
By default, Pm Wiki places a limit of 50 include directives for any given page, to prevent runaway infinite loops and other situations that might eat up server resources. (Two of these are Group Header and Group Footer.) The limit can be modified by the wiki administrator via the $MaxIncludes
variable.
Is there any way to include from a group of pages without specifying by exact name, e.g. between Anchor X and Y from all pages named IF Class?-* ?
This can be achieved using page lists.
There appears to be a viewing issue when the included page contains the (:title:) directive.
In a default installation, the last title in the page overrides previous ones so you can place your (:title :) directive at the bottom of the page, after any includes. See also $EnablePageTitlePriority
.
Inter Map
Are Inter Map names case sensitive?
Yes, thus eAdmin:
is a different Inter Map link than EAdmin:
.
How can I achieve a localmap.txt mapping with the effect of Pics: Path:/somepathto/pics/
?
Use the following:
Pics: /somepathto/pics/
How can I define an Inter Map in PHP?
Use the following:
$LinkFunctions['PmWikiHome:'] = 'LinkIMap'; $IMap['PmWikiHome:'] = 'http://pmwiki.org/wiki/$1';
Page specific variables
Is there a variable like $LastModified, but which shows me the creation time?
No, but you can create one in config.php. For instance:
# add page variable {$PageCreationDate} in format yyyy-mm-dd $FmtPV['$PageCreationDate'] = 'strftime("%Y-%m-%d", $page["ctime"])';
If you like the same format that you define in config.php with $TimeFmt
use
$FmtPV['$Created'] = "strftime(\$GLOBALS['TimeFmt'], \$page['ctime'])";
How can I test if a variable is set and/or not empty?
Use (:if ! equal "{$Variable}" "":) $Variable is not empty. (:ifend:)
. Note that undefined/inexistent variables appear as empty ones.
Wiki Group
How can I get rid of the 'Main' group in urls for pages pointing to Main?
How can I limit the creation of new groups?
See Cookbook:Limit Wiki Groups.
Why doesn't [[St. Giles and St. James]] work as a link? (It doesn't display anything.)
Because it contains periods, and destroys Pm Wiki's file structure, which saves pages as Group.PageName. Adding those periods disrupts this format. Links may only contain words. If you need a link precisely as shown, the page must be named eg St Giles And St James? then you can use the (:title:) directive to have the page's title appear with periods (:title St. Giles and St. James:). (Although in US grammar the period is often omitted and in UK grammar the period must be omitted for contractions like St).
How can I delete a wiki group?
Normally you can't, as this requires an admin with server-side access to delete the file that makes up the group's Recent Changes? page. But there is an option method of making it possible to delete Recent Changes? pages from within the wiki if the admin enables the code found on Cookbook:RecentChanges Deletion.
How can I delete a wiki group's Group.Recent Changes? page?
Normally you can't, as this requires an admin with server-side access to delete a file. But there is an optional method of making it possible to delete Recent Changes? pages from within the wiki if the admin enables the code found on Cookbook:RecentChanges Deletion.
Group Headers
How do I set the same header or footer for all pages/groups?
The header and footer for each page are controlled by the variables $GroupHeaderFmt
and $GroupFooterFmt
. If your site-wide header and footer pages are Site.Site Header? and Site.Site Footer?, you can add this in config.php:
### If you use Site.SiteHeader and Group.GroupHeader $GroupHeaderFmt = '(:include {$SiteGroup}.SiteHeader' . ' basepage={*$FullName}:)(:nl:)' . $GroupHeaderFmt; ### If you use Site.SiteHeader instead of Group.GroupHeader $GroupHeaderFmt = '(:include {$SiteGroup}.SiteHeader' . ' basepage={*$FullName}:)(:nl:)'; ### If you use Site.SiteFooter and Group.GroupFooter $GroupFooterFmt .= '(:nl:)(:include {$SiteGroup}.SiteFooter' . ' basepage={*$FullName}:)'; ### If you use Site.SiteFooter instead of Group.GroupFooter $GroupFooterFmt = '(:nl:)(:include {$SiteGroup}.SiteFooter' . ' basepage={*$FullName}:)';
Note that single quotes must be used in the lines above.
See also the Cookbook:AllGroupHeader recipe.
Instead of using an additional page, you could set any wiki text in $GroupHeaderFmt
, for example:
$GroupHeaderFmt .= "Global message here.";
Wiki Trails
What's the difference between a PageList and a Wiki Trail??
The pagelist directive dynamically generates a list of pages. There are many ways to generate the list, including using a Wiki Trail? as the source. The pagelist directive then displays the pages that match the criteria using an optional template - for example displaying each page name on a separate line as a link or including the entire content. The pagelist directive currently does not have built-in navigation markup that you can put on the pages in the list. By contrast, Wiki Trails are simply specified via links on an "index" page and you can put previous-next navigation markup on each page. The two serve very different purposes. Wiki Trails are useful for specifying the pages in web feeds, for creating a "tour" through a predefined set of pages, and many other things.
Page History
Is there a way to remove page history from page files?
1. Administrators can clean page histories using the Cookbook:ExpireDiff recipe.
2. Administrators with FTP file access can download individual pages from the wiki.d directory, open them in a text editor, manually remove history, and re-upload the files to wiki.d/ directory. Care must be exercised, when manually editing a page file, to preserve the minimum required elements of the page and avoid corrupting its contents. See PageFileFormat#creating.
3. Edit the page. Select all the contents of the edit text area and cut them to the clipboard. Enter delete
into the text area and click on the save and edit button. Select all the contents of the edit text area and paste the contents of the clipboard over them. Click on the save button. This will remove all of the page's history up to the final save in which the pasted material is re-added.
How can I restrict viewing the page history (?action=diff)
to people with edit permission?
In the local/config.php file, set
$HandleAuth['diff'] = 'edit'
;
In case of this restriction is set up on a farm, and you want to allow it on a particular wiki, set in your local/config.php :
$HandleAuth['diff'] = 'read'
;
Passwords
How can I password protect all the pages and groups on my site? Do I really have to set passwords page by page, or group by group?
Administrators can set passwords for the entire site by editing the config.php file; they don't have to set passwords for each page or group. For example, to set the entire site to be editable only by those who know an "edit" password, an administrator can add a line like the following to local/config.php:
$DefaultPasswords
['edit'] = crypt('edit_password');
For more information about the password options that are available only to administrators, see PasswordsAdmin.
I get http error 500 "Internal Server Error" when I try to log in. What's wrong?
This can happen if the encrypted passwords are not created on the web server that hosts the Pm Wiki.
The crypt function changed during the PHP development, e.g. a password encrypted with PHP 5.2 can not be decrypted in PHP 5.1, but PHP 5.2 can decrypt passwords created by PHP 5.1.
This situation normally happens if you prepare everything on your local machine with the latest PHP version and you upload the passwords to a webserver which is running an older version.
The same error occurs when you add encrypted passwords to local/config.php.
Solution: Create the passwords on the system with the oldest PHP version and use them on all other systems.
How can I create private groups for users, so that each user can edit pages in their group, but no one else (other than the admin) can?
Modify the edit attribute for each group to id:username, e.g. set the edit attribute in Jane Doe.Group Attributes? to id:Jane Doe?.
There is a more automatic solution, but it's probably not a good idea for most wikis. Administrators can use the AuthUser recipe and add the following few lines to their local/config.php file to set this up:
$group = Fmt Page Name('$Group', $pagename);
$DefaultPasswords
['edit'] = 'id:'.$group;
include_once("$FarmD
/scripts/authuser.php");
This automatically gives edit rights to a group to every user who has the same user name as the group name. Unfortunately it also gives edit rights to such a user who is visiting a same-named group not just for pages in that group, but for any page on the wiki that relies on the site's default edit password. This can create security holes.
How come when I switch to another wiki within a farm, I keep my same authorization?
Pm Wiki uses PHP sessions to keep track of authentication/authorization information, and by default PHP sets things up such that all interactions with the same server are considered part of the same session.
An easy way to fix this is to make sure each wiki is using a different cookie name for its session identifier. Near the top of one of the wiki's local/config.php files, before calling authuser or any other recipes, add a line like:
session_name('XYZSESSID');
You can pick any alphanumeric name for XYZSESSID; for example, for the cs559-1 wiki you might choose
session_name('CS 559 SESSID?');
This will keep the two wikis' sessions independent of each other.
Is it possible to test the password level for display and/or if condition? Example: * (:if WriterPassword:) (display Edit link) (:ifend:)
You can use (:if auth edit:)
. See ConditionalMarkup.
Deleting Pages
Deleting Wiki Groups & Categories: Once I create a Group or Category, how can I get rid of that group or category?
An admin can just remove the unwanted pages from wiki.d/ . Normally, doing it via the wiki
doesn't resolve the problem, since it counts as an "update" which causes the Recent Changes? page to be re-created, but it is possible to modify the site's configuration to allow deletion of the group's Recent Changes? page -- see Cookbook:RecentChangesDeletion.
To delete a category, first delete the [[!Category]]
links from all pages to that category, then just delete the category page as explained above.
PmWiki Installation
Should I rename pmwiki.php to index.php?
Renaming pmwiki.php is not recommended. Instead, create an index.php file that contains this single line
<?php include_once('pmwiki.php');
How do I make pmwiki.php the default page for a website?
Create an index.php file that runs Pm Wiki from a subdirectory (pmwiki/ for example) and place it in the site's web document root (the main directory for the website).
<?php chdir('pmwiki'); include_once('pmwiki.php');
Note: You will also need to explicitly set the $PubDirUrl
variable (e.g. to "http://example.com/pmwiki/pub"
) in local/config.php .
How do I enable "Clean UR Ls?" that are shorter and look like paths to my wiki pages? Why does pmwiki.org appear to have a directory structure rather than "?n=pagename" in UR Ls??
See Cookbook:CleanUrls.
How can I run Pm Wiki on a standalone (offline, portable) machine ?
Upgrades
How can I determine what version of Pm Wiki I'm running now?
See version - Determining and displaying the current version of Pm Wiki (pmwiki-2.2.40).
How can I test a new version of Pm Wiki on my wiki without changing the prior version used by visitors?
The easy way to do this is to install the new version in a separate directory, and for the new version set (in local/config.php):
$WikiLibDirs = array(&$WikiDir, new PageStore('/path/to/existing/wiki.d/{$FullName}'), new PageStore('wikilib.d/{$FullName}'));
This lets you test the new version using existing page content without impacting the existing site or risking modification of the pages. (Of course, any recipes or local customizations have to be installed in the new version as well.)
Then, once you're comfortable that the new version seems to work as well as the old, it's safe to upgrade the old version (and one knows of any configuration or page changes that need to be made).
Uploads Administration
How do I disable uploading of a certain type of file?
Here's an example of what to add to your local/config.php file to disable uploading of .zip files, or of files with no extension:
$UploadExtSize['zip'] = 0; # Disallow uploading .zip files $UploadExtSize[''] = 0; # Disallow files with no extension
How do I attach uploads to individual pages or the entire site, instead of organizing them by wiki group?
Use the $UploadPrefixFmt
variable (see also the Cookbook:UploadGroups recipe).
$UploadPrefixFmt = '/$FullName'; # per-page, in Group.Name directories
$UploadPrefixFmt = '/$Group/$Name'; # per-page, in Group directories with Name subdirectories
$UploadPrefixFmt = ''; # site-wide
For $UploadDirQuota
- can you provide some units and numbers? Is the specification in bytes or bits? What is the number for 100K? 1 Meg? 1 Gig? 1 Terabyte?
Units are in bytes.
$UploadDirQuota
= 100*1024; # limit uploads to 100KiB$UploadDirQuota
= 1000*1024; # limit uploads to 1000KiB$UploadDirQuota
= 1024*1024; # limit uploads to 1MiB$UploadDirQuota
= 25*1024*1024; # limit uploads to 25MiB$UploadDirQuota
= 2*1024*1024*1024; # limit uploads to 2GiB
Is there a way to allow file names with Unicode or additional characters?
Yes, see $UploadNameChars
Where is the list of attachments stored?
It is generated on the fly by the (:attachlist:) markup.
How can I find orphaned or missing attachments
For older versions of Pm Wiki, see Cookbook:Attachlist enhanced "",
for version 2.2 or higher see Cookbook:Attachtable ""
How can I prevent hotlinking of my uploaded images
See Cookbook:Prevent Hotlinking
I have limited the max upload size to 8 MB in config.php, however only files smaller than 2MB can be uploaded.
Check your php.ini for upload_max_filesize
upload_max_filesize = 8M
If you cannot access your php.ini directly try to soften server limits in the root .htaccess file:
php_value post_max_size 63M php_value upload_max_filesize 62M php_value memory_limit 64M php_value max_execution_time 600 php_value default_socket_timeout 600
How can I upload multiple files at once?
See the following recipes: DragDropMultiUpload, MultiUpload, UploadForm.
Security
How do I report a possible security vulnerability of Pm Wiki?
Pm wrote about this in a post to pmwiki-users from September 2006. In a nutshell he differentiates two cases:
- The possible vulnerability isn't already known publicly: In this case please contact us by private mail.
- The possible vulnerability is already known publicly: In this case feel free to discuss the vulnerability in public (e.g. on pmwiki-users or in the PITS).
See his post mentioned above for details and rationals.
What about the botnet security advisory at http://isc.sans.org/diary.php?storyid=1672?
Sites that are running with PHP's register_globals setting set to "On" and versions of Pm Wiki prior to 2.1.21 may be vulnerable to a botnet exploit that is taking advantage of a bug in PHP. The vulnerability can be closed by turning register_globals off, upgrading to Pm Wiki 2.1.21 or later, or upgrading to PHP versions 4.4.3 or 5.1.4.
In addition, there is a test at PmWiki:SiteAnalyzer that can be used to determine if your site is vulnerable.
Wiki Vandalism and Spam
- Assumptions
- you are using a Blocklist and Url approvals.
- You don't want to resort to password protecting the entire wiki, that's not the point after all.
- Ideally these protections will be invoked in
config.php
How do I stop pages being deleted, eg password protect a page from deletion?
Use Cookbook:DeleteAction and password protect the page deletion action by adding $DefaultPasswords['delete'] = '*';
to config.php
or password protect the action with $HandleAuth
['delete'] = 'edit';
$HandleAuth
['delete'] = 'admin';
to require the edit or admin password respectively.
How do I stop pages being replaced with an empty (all spaces) page?
Add block: /^\s*$/
to your blocklist.
how do I stop pages being completely replaced by an inane comment such as excellent site, great information, where the content cannot be blocked?
Try using the newer automatic blocklists that pull information and IP addresses about known wiki defacers.
(OR) Try using Cookbook:Captchas or Cookbook:Captcha (note these are different).
(OR) Set an edit password, but make it publicly available on the Site.AuthForm template.
How do I password protect the creation of new groups?
See Cookbook:Limit Wiki Groups
How do I password protect the creation of new pages?
See Cookbook:Limit new pages in Wiki Groups
How do I take a whitelist approach where users from known or trusted IP addresses can edit, and others require a password?
Put these lines to local/config.php:
## Allow passwordless editing from own turf, pass for others. if ($action=='edit' && !preg_match("/^90\\.68\\./", $_SERVER['REMOTE_ADDR']) ) { $DefaultPasswords['edit'] = crypt('foobar'); }
Replace 90.68. with the preferred network prefix and foobar with the default password for others.
See also Cookbook:AuthDNS.
How do I password protect page actions?
See Passwords for setting in config.php
$HandleAuth
['pageactionname'] = 'pageactionname'; # along with :
$DefaultPasswords
['pageactionname'] = crypt('secret phrase');
or
$HandleAuth
['pageactionname'] = 'anotherpageactionname';
How do I moderate all postings?
Enable PmWiki.Drafts
- Set
$EnableDrafts
, this relabels the "Save" button to "Publish" and a "Save draft" button appears. - Set
$EnablePublishAttr
, this adds a new "publish" authorization level to distinguish editing from publishing.
How do I make a read only wiki?
In config.php set an "edit" password.
How do I restrict access to uploaded attachments?
See
- instructions for denying public access to the uploads directory
- see Cookbook:Secure attachments
How do I hide the IP addresses in the "diff" pages?
If the user fills an author name, the IP address is not displayed. To require an author name, set in config.php such a line:
$EnablePostAuthorRequired
= 1;
The IP address can also be seen in a tooltip title when the mouse cursor is over the author name. To disable the tooltip, set in config.php:
$DiffStartFmt = "<div class='diffbox'><div class='difftime'><a name='diff\$DiffGMT' href='#diff\$DiffGMT'>\$DiffTime</a> \$[by] <span class='diffauthor'>\$DiffAuthor</span> - \$DiffChangeSum</div>";
Custom Markup
How can I embed Java Script? into a page's output?
There are several ways to do this. The Cookbook:JavaScript recipe describes a simple means for embedding static Java Script? into web pages using custom markup. For editing Java Script? directly in wiki pages (which can pose various security risks), see the JavaScript-Editable recipe. For Java Script? that is to appear in headers or footers of pages, the skin template can be modified directly, or <script> statements can be inserted using the $HTMLHeaderFmt
array.
How would I create a markup ((:nodiscussion:)) that will set a page variable ({$HideDiscussion}) which can be used by (:if enabled HideDiscussion:) in .PageActions?
Add the following section of code to your config.php
SDV($HideDiscussion, 0); #define var name Markup('hideDiscussion', '<{$var}', '/\\(:nodiscussion:\\)/e', 'setHideDiscussion(true)'); function setHideDiscussion($val) { global $HideDiscussion; $HideDiscussion = $val; }
This will enable the (:if enabled HideDiscussion:)
markup to be used. If you want to print the current value of {$HideDiscussion} (for testing purposes) on the page, you'll also need to add the line: $FmtPV['$HideDiscussion'] = '$GLOBALS["HideDiscussion"]';
Pm Wiki only supports tool tips for external links, can I use custom markup to add tool tips to internal links?
Yes, add the following custom markup to your config.php:
Markup('%title%', 'inline', '/%title%(.*?)"(.*?)"(.*?)%%/', '<span title="$2">$1$3</span>'); # Add tool tips to internal links, Example: %title%[[link"tool tip"]]%%
Use the markup with internal links such as:
%title%[[CookBook "cool" | Example]]%%
You can apply it in other situations too, for instance:
%title%"flexible"(:if true:)write something(:else:)write something else(:ifend:)%%
See also Cookbook:LinkTitles.
It appears that (.*?) does not match newlines in these functions, making the above example inoperable if the text to be wrappen in <em> contains new lines.
If you include the "s" modifier on the regular expression then the dot (.) will match newlines. Thus your regular expression will be "/STUFF(.*?)/s". That s at the very end is what you are looking for. If you start getting into multi-line regexes you may be forced to look at the m option as well - let's anchors (^ and $) match not begin/end of strings but also begin/end of lines (i.e., right before/after a newline).
How can the text returned by my markup function be re-processed by the markup engine?
If the result of your markup contains more markup that should be processed, you have two options. First is to select a "when" argument that is processed earlier than the markup in your result. For example, if your markup may return [[links]], your "when" argument could be "<links"
and your markup will be processed before the links markup. The second option is to call the PRR() function in your markup definition or inside your markup function. In this case, after your markup is processed, Pm Wiki will restart all markups from the beginning.
How do I get started writing recipes and creating my own custom markup?
(alternate) Introduction to custom markup for Beginners
How do I make a rule that runs once at the end of all other rule processing?
Use this statement instead of the usual Markup()
call:
$MarkupFrameBase['posteval']['myfooter'] = "\$out = onetimerule(\$out);";
Internationalizations
If my wiki is internationalized by config.php, how do I revert a specific group to English?
Use $XLLangs = array('en');
in the group's group customization file.
If my wiki is in English and I want just one page, or group, in Spanish do I say XLPage('es','PmWikiEs.XLPage');
in the group or page configuration file?
Yes, that is usually the best method. If you were doing this with many scattered pages, or with several languages, you might find it easier to maintain if you load the translations all in config.php like this:
XL Page?('es','Pm Wiki Es.XL Page?');
XL Page?('fr','Pm Wiki Fr.XL Page?');
XL Page?('ru','Pm Wiki Ru.XL Page?');
$XLLangs
= array('en');
Then in each group or page configuration file, you'd just use $XLLangs
= array('es'); to set the language to use (in this case, Spanish). Note that though this method is easier to maintain, its somewhat slower because it loads all the dictionaries for each page view, even if they won't be used.
What does the first parameter of this function stand for? How can it be used?
The XL Page? mechanism allows multiple sets of translations to be loaded, and the first parameter is used to distinguish them.
For example, suppose I want to have translations for both normal French and "Canadian" French. Rather than maintain two entirely separate sets of pages, I could do:
XL Page?('fr-ca', 'Pm Wiki Fr Ca.XL Page?'); XL Page?('fr', 'Pm Wiki Fr.XL Page?');
Pm Wiki Fr.XL Page? would contain all of the standard French translations, while Pm Wiki Fr CA.XL Page? would only need to contain "Canada-specific" translations -- i.e., those that are different from the ones in the French page.
The first parameter distinguishes the two sets of translations.
In addition, a config.php script can use the $XLLangs
variable
to adjust the order of translation, so if there was a group or
page where I only wanted the standard French translation, I
can set
$XLLangs
= array('fr', 'en');
and Pm Wiki will use only the 'fr' and 'en' translations (in that order), no matter how many translations have been loaded with XL Page?().
How can I add a translation for an individual string in a PHP file?
Use the XLSDV() function to provide a translation for a specific (English) string. For instance, with this in config.php
XLSDV('nl', array('my English expression'=>'mijn Nederlandse uitdrukking'));
any instance of the variable expression $[my English expression]
in wiki mark-up will be displayed as my English expression in default (English) context, but as mijn Nederlandse uitdrukking in Dutch (nl) context, i.e. when XLPage('nl',...)
has been called for that page in config.php or a cookbook recipe.
If you need to get a translation in a PHP file, use the XL()
function:
$local_string = XL("my English expression");
But beware: XL Page?() uses XLSDV() internally for its translation pairs, too, and only the first definition is accepted! Thus, if the Dutch XL Page? already contains a translation and you want to override that, you need to use your XLSDV('nl',...) before calling the correspondent XL Page?('nl',...). Otherwise, by using XLSDV() after XL Page?() - e.g. within a recipe that is included later in config.php - your translation will only work as long nobody defines 'my English expression' in that XL Page?.
Local Customizations
There's no "config.php"; it's not even clear what a "local customisation file" is!
The "sample-config.php" file in the "docs" folder, is given as an example. Copy it to the "local" folder and rename it to "config.php". You can then remove the "#" symbols or add other commands shown in the documentation. See also Group Customizations.
Can I change the default page something other than Main.Home Page ($DefaultPage
)?
Yes, just set the $DefaultPage
variable to the name of the page you want to be the default. You might also look at the $DefaultGroup
and $DefaultName
configuration variables.
$DefaultPage = 'ABC.StartPage';
How do I get the group / page name in a local configuration file (e.g. local/config.php)?
Use the following markup in pmwiki-2.1.beta21 or newer:
## Get the group and page name $pagename = ResolvePageName($pagename); $page = PageVar($pagename, '$FullName'); $group = PageVar($pagename, '$Group'); $name = PageVar($pagename, '$Name');
Note the importance of the order of customizations in config.php below to avoid caching problems.
If you need the verbatim group and page name (from the request) early in config.php, $pagename is guaranteed to be set to
- Any value of ?n= if it's set, or
- Any value of ?pagename= if it's set, or
- The "path info" information from REQUEST_URI (whatever follows SCRIPT_NAME), or
- Blank otherwise
according to this posting
Can I remove items from the wikilib.d folder on my site?
The files named Site.* and Site Admin.* contain parts of the interface and the configuration and they should not be removed. The other files named Pm Wiki* contain the documentation and could be removed.
How do I customize my own 404 error page for non-existent pages?
To change the text of the message, try editing the Site.PageNotFound page.
Is the order of customizations in config.php important? Are there certain things that should come before or after others in that file?
Yes, see Order of the commands in config.php.
Group Customizations
How can I apply CSS styles to a particular group or page?
Simply create a pub/css/Group.css or pub/css/Group.Page.css file containing the custom CSS styles for that group or page.
Why shouldn't passwords be set in group (or page) customization files? Why shouldn't group or page passwords be set in config.php?
The reason for this advice is that per-group customization files are only loaded for the current page. So, if $DefaultPasswords['read']
is set in Group A?.php, then someone could use a page in another group to view the contents of pages in Group A?. For example, Main.Wiki Sandbox could contain:
- (:include GroupA.SomePage:)
and because the Group A?.php file wasn't loaded (we're looking at Main.Wiki Sandbox --> local/Main.php), there's no read password set.
The same is true for page customization files.
Isn't that processing order strange? Why not load per page configuration last (that is after global configuration an per group configuration)?
Many times what we want to do is to enable a certain capability for a group of pages, but disable it on a specific page, as if it was never enabled. If the per-group config file is processed first, then it becomes very difficult/tedious for the per-page one to "undo" the effects of the per-group page. So, we load the per-page file before the per-group.
If a per-page customization wants the per-group customizations to be performed first, it can use the techniques given in PmWiki.GroupCustomizations (using include_once() or setting $EnablePGCust = 0
).
Skins
How do I change the Wiki's default name in the upper left corner of the Main Page?
Put the following config.php
$WikiTitle = 'My Wiki Site';
The docs/sample-config.php file has an example of changing the title.
How can I embed Pm Wiki pages inside a web page?
Source them through a PHP page, or place them in a frame.
How do I change the font or background color of the hints block on the Edit Page?
Add a CSS style to pub/css/local.css: .quickref {background:...; color:... }
. The hints are provided by the Site.EditQuickReference page, which is in the Pm Wiki or Site wikigroup. Edit that page, and change the "bgcolor" or specify the font "color" to get the contrast you need.
Skin Templates
How do I customize the CSS styling of my Pm Wiki layout?
See Skins for how to change the default Pm Wiki skin. See also Cookbook:Skins, where you will find pre-made templates you can use to customize the appearance of your site. You can also create a file called local.css in the pub/css/ directory and add CSS selectors there (this file gets automatically loaded if it exists). Or, styles can be added directly into a local customization file by using something like:
$HTMLStylesFmt[] = '.foo { color:blue; }';
Where can the mentioned "translation table" be found for adding translated phrases?
Is it possible to have the edit form in full page width, with no sidebar?
If the sidebar is marked with <!--PageLeftFmt-->
, adding (:noleft:)
to Site.Edit Form will hide it when a page is edited.
Can I easily hide the Home Page title from the homepage?
Yes, you can use in the wiki page either (:title Some other title:)
to change it or (:notitle:)
to hide it.
Is it possible to hide the Search-Bar in the default Pm Wiki Skin?
Yes, please see Cookbook:HideSearchBar.
Web Feeds
How do I include text from the page (whole page, or first X characters) in the feed body? (note: markup NOT digested)
function Markup Excerpt?($pagename) {
$page = Retrieve Auth Page?($pagename, 'read', false);
return substr(@$page['text'], 0, 200);
}
$FmtPV
['$MarkupExcerpt'] = 'Markup Excerpt?($pn)';
$FeedFmt['rss']['item']['description'] = '$MarkupExcerpt';
Q:Does this mean if I want to include the time in the rss title and "summary" to rss body I call $FeedFmt
twice like so:
$FeedFmt['rss']['item']['description'] = '$LastSummary'; $FeedFmt['rss']['item']['title'] = '{$Group} / {$Title} @ $ItemISOTime';
- From mailing list Feb 13,2007, a response by Pm: Yes
How can I use the RSS <enclosure> tag for podcasting?
For podcasting of mp3 files, simply attach an mp3 file to the page with the same name as the page (i.e., for a page named Podcast.Episode4, one would attach to that page a file named "Episode4.mp3"). The file is automatically picked up by ?action=rss and used as an enclosure.
The set of potential enclosures is given by the $RSSEnclosureFmt array, thus
$RSSEnclosureFmt = array('{$Name}.mp3', '{$Name}.wma', '{$Name}.ogg');
allows podcasting in mp3, wma, and ogg formats.
How to add "summary" to the title in a rss feed (ie. with ?action=rss
)?
Add this line in you local/config.php
$FeedFmt['rss']['item']['title'] = '{$Group} / {$Title} : $LastModifiedSummary';
How to add "description" to the title in an rss feed, and summary to the body?
Add these lines to your local/config.php
$FeedFmt['rss']['item']['title'] = '{$Group} / {$Title} : {$Description}';
$FeedFmt['rss']['item']['description'] = '$LastModifiedSummary';
NOTES:
- you need to replicate these lines for each type (atom, rdf, dc) of feed you provide.
- the RSS
description
-tag is not equivalent to the pmWiki$Description
variable, despite the confusing similarity.
Some of my password-protected pages aren't appearing in the feed... how do I work around this?
From a similar question on the newsgroup, Pm's reply:
The last time I checked, RSS and other syndication protocols didn't really have a well-established interface or mechanism for performing access control (i.e., authentication). As far as I know this is still the case.
Pm Wiki's Web Feeds capability is built on top of pagelists, so it
could simply be that the $EnablePageListProtect
option is preventing
the updated pages from appearing in the feed. You might try
setting $EnablePageListProtect
=0; and see if the password-protected
pages start appearing in the RSS feed.
The "downside" to setting $EnablePageListProtect
to zero is that
anyone doing a search on your site will see the existence of the
pages in the locked section. They won't be able to read any of
them, but they'll know they are there!
You could also set $EnablePageListProtect
to zero only if ?action=rss:
if ($action == 'rss') $EnablePageListProtect
= 0;
This limits the ability to see the protected pages to RSS feeds; normal pagelists and searches wouldn't see them.
Lastly, it's also possible to configure the webfeeds to obtain the authentication information from the url directly, as in:
.../All Recent Changes?action=rss&authpw=secret
The big downside to this is that the cleartext password will end up traveling across the net with every RSS request, and may end up being recorded in Apache's access logs.
How to add feed image?
Add the following to local/config.php (this example is for ?action=rss
):
$FeedFmt['rss']['feed']['image'] = " <title>Logo title</title> <link>http://example.com/</link> <url>http://example.com/images/logo.gif</url> <width>120</width> <height>60</height>";
How do I insert RSS news feeds into Pm Wiki pages?
How can I specify default feed options in a configuration file instead of always placing them in the url?
For example, if you want ?action=rss
to default to ?action=rss&group=News&order=-time&count=10
, try the following in a local customization file:
if ($action == 'rss') SDVA($_REQUEST, array( 'group' => 'News', 'order' => '-time', 'count' => 10));
Are there ways to let people easily subscribe to a feed?
On some browsers (Mozilla Firefox), the visitor can see an orange RSS icon in the address bar, and subscribe to the feed by clicking on it. To enable the RSS icon, add this to config.php :
$HTMLHeaderFmt['feedlinks'] = '<link rel="alternate" type="application/rss+xml" title="$WikiTitle" href="$ScriptUrl?n=Site.AllRecentChanges&action=rss" /> <link rel="alternate" type="application/atom+xml" title="$WikiTitle" href="$ScriptUrl?n=Site.AllRecentChanges&action=atom" />';
You can also add such a link, for example in your Side Bar?, [[Site.AllRecentChanges?action=atom | Subscribe to feed]]
.
Can I create an RSS feed for individual page histories?
See Cookbook:PageFeed.
How do I create a custom Feed Page? similar to Recent Changes? or All Recent Changes?, but with only certain groups or pages recorded?
See Cookbook:CustomRecentChanges. In a nutshell, you'll declare a $RecentChangesFmt
variable with your dedicated Feed Page?, and then wrap it in a condition of your choice. For example:
if (PageVar($pagename, '$Group')!='ForbiddenGroup') { $RecentChangesFmt['Site.MyFeedPage'] = '* [[{$FullName}]] . . . $CurrentTime $[by] $AuthorLink: [=$ChangeSummary=]'; }
How can I update my RSS feed to show every edit for pages on that feed, not just new pages added to the feed?
Add unique guid links for each edit to your to congif.php file (see PITS entry):
$FeedFmt['rss']['item']['guid'] = '{$PageUrl}?guid=$ItemISOTime';
Alternatively, you can create the option for edit monitoring by adding a qualifier for RSS links. This allows the user to choose between default new pages RSS feeds and new edits RSS feeds (pmwiki.org has this option enabled).
## For new pages updates: http://example.com/wiki/HomePage?action=rss ## For edits updates: http://example.com/wiki/HomePage?action=rss&edits=1 if(@$_REQUEST['edits'] && $action == 'rss') $FeedFmt['rss']['item']['guid'] = '{$PageUrl}?guid=$ItemISOTime';
Troubleshooting
Why am I seeing strange errors after upgrading?
Make sure all of the files were updated, in particular pmwiki.php.
This question sometimes arises when an administrator hasn't followed the advice, which used to be less prominent, on the installation and initial setup tasks pages and has renamed pmwiki.php instead of creating an index.php wrapper script. If you have renamed pmwiki.php to index.php, then the upgrade procedure won't have updated your index.php file. Delete the old version and create a wrapper script so it won't happen again.
Sometimes an FTP or other copy program will fail to transfer all of the files properly. One way to check for this is by comparing file sizes.
Be sure all of the files in the wikilib.d/ directory were also upgraded. Sometimes it's a good idea to simply delete the wikilib.d/ directory before upgrading. (Local copies of pages are stored in wiki.d/ and not wikilib.d/.)
Make sure that the file permissions are correct. The official files have a restricted set of permissions that might not match your site's needs.
If you use a custom pattern for $GroupPattern
make sure that it includes Site ($SiteGroup
) and since PM Wiki? 2.2 also Site Admin ($SiteAdminGroup
).
Otherwise migration may fail (e.g. missing Site Admin for PM Wiki? 2.2 and later) and/or login does not work.
Additionally Main ($DefaultGroup
) should be included too.
I'm suddenly getting messages like "Warning: fopen(wiki.d/.flock): failed to open stream: Permission denied...
" and "Cannot acquire lockfile
"... what's wrong?
Something (or someone) has changed the permissions on the wiki.d/.flock file or the wiki.d/ directory such that the webserver is no longer able to write the lockfile. The normal solution is to simply delete the .flock file from the wiki.d/ directory -- Pm Wiki will then create a new one. Also be sure to check the permissions on the wiki.d/ directory itself. (One can easily check and modify permissions of the wiki.d/ directory in FileZilla (open-source FTP app) by right-clicking on the file > File attributes)
My links in the sidebar seem to be pointing to non-existent pages, even though I know I created the pages. Where are the pages?
Links in the sidebar normally need to be qualified by a WikiGroup in order to work properly (use [[Group.Page]] instead of [[Page]]).
Also: Make sure you type SideBar with a capital B.
Why am I seeing "Warning: Cannot modify header information - headers already sent ...
" messages at the top of my page.
If this is the first or only error message you're seeing, it's usually an indication that there are blank lines or spaces before the <?php
or after the ?>
in a local customization file. Double-check the file and make sure there aren't any blank lines or spaces before the initial <?php
. It's often easiest and safest to eliminate any closing ?>
altogether. On Windows, it may be necessary to use a hex editor to convert LFCR line endings to LF line endings in the local\config.php file.
If the warning is appearing after some other warning or error message, then resolve the other error and this warning may go away.
How do I make a PHP Warning about function.session-write-close
go away?
If you are seeing an error similar to this
Warning: session_write_close() [function.session-write-close]: open(/some/filesystem/path/to/a/directory/sess_[...]) failed: No such file or directory (2) in /your/filesystem/path/to/pmwiki.php on line NNN
Pm Wiki sometimes does session-tracking using PHP's session-handling functions. For session-tracking to work, some information needs to be written in a directory on the server. That directory needs to exist and be writable by the webserver software. For this example, the webserver software is configured to write sessions in this directory
/some/filesystem/path/to/a/directory/
but the directory doesn't exist. The solution is to do at least one of these:
- Create the directory and make sure it's writable by the webserver software
- Provide a session_save_path value that points to a directory that is writable by the server, e.g. in config.php:
session_save_path('/home/someuser/tmp/sessions');
# unix-type OS
session_save_path('C:/server/tmp/sessions');
# Windows
Why is Pm Wiki prompting me multiple times for a password I've already entered?
This could happen like out of nowhere if your hosting provider upgrades to PHP version 5.3, and you run an older Pm Wiki release. Recent Pm Wiki releases fix this problem.
Alternatively, this may be an indication that the browser isn't accepting cookies, or that PHP's session handling functions on the server aren't properly configured. If the browser is accepting cookies, then try setting $EnableDiag
=1; in local/config.php, run Pm Wiki using ?action=phpinfo
, and verify that sessions are enabled and that the session.save_path has a reasonable value. Note that several versions of PHP under Windows require that a session_save_path be explicitly set (this can be done in the local/config.php file). You might also try setting session.auto_start to 1 in your php.ini.
See also the question I have to log in twice below.
I edited config.php, but when I look at my wiki pages, all I see is "Parse error: parse error, unexpected T_VARIABLE in somefile on line number.
"
You've made a mistake in writing the PHP that goes into the config.php file. The most common mistake that causes the T_VARIABLE error is forgetting the semi-colon (;) at the end of a line that you added. The line number and file named are where you should look for the mistake.
Searches and pagelists stopped working after I upgraded -- no errors are reported, but links to other pages do not appear (or do not appear as they should) -- what gives?
Be sure all of the files in the wikilib.d/ directory were also upgraded. In particular, it sounds as if the Site.Page List Templates page is either missing (if no links are displayed) or is an old version (if the links do not appear as they should). Also make sure that read-permissions (attr) are set for the pages Site.Page List Templates and Site.Search.
Some of my posts are coming back with "403 Forbidden" errors, "Not Acceptable", or "Internal Server Error". This happens with some posts but not others.
Your webserver probably has mod_security enabled. The mod_security "feature" scans all incoming posts for forbidden words or phrases that might indicate someone is trying to hack the system, and if any of them are present then Apache returns the 403 Forbidden error. Common phrases that tend to trigger mod_security include "curl ", "wget", "file(", and "system(", although there are many others.
Since mod_security intercepts the requests and sends the "forbidden"
message before Pm Wiki ever gets a chance to run, it's not a bug in Pm Wiki, and
there's little that Pm Wiki can do about it. Instead, one has to alter the
webserver configuration to disable mod_security or reconfigure it to allow
whatever word it is forbidding. Some sites may be able to disable mod_security
by placing SecFilterEngine off
in a .htaccess file.
I get the following message when attempting to upload an image, what do I do?
Warning: move_uploaded_file(): SAFE MODE Restriction in effect. The script whose uid is 1929 is not allowed to access /home/onscolre/public_html/pmwikiuploads/Photos owned by uid 33 in /home/onscolre/public_html/pmwiki/scripts/upload.php on line 198
Pm Wiki can't process your request
?cannot move uploaded file to /home/onscolre/public_html/pmwikiuploads/Foundation Pupils In 1958?.jpeg
We are sorry for any inconvenience.
Your server is configured with PHP Safe Mode enabled. Configure your wiki to use a site-wide uploads prefix, then create the uploads/ directory manually and set 777 permissions on it (rather than letting Pm Wiki create the directory).
I'm starting to see "Division by zero error in pmwiki.php..." on my site. What's wrong?
It's a bug in Pm Wiki that occurs only with the tables markup and only for versions of PHP >= 4.4.6 or >= 5.2.0. Often it seems to occur "out of nowhere" because the server administrator has upgraded PHP. Try upgrading to a later version of Pm Wiki to remove the error, or try setting the following in local/config.php:
$TableRowIndexMax
= 1;
I have to log in twice (two times) (2 times). -or- My password is not being required even though it should. -or- I changed the password but the old password is still active. -or- My config.php password is not over-riding my farmconfig.php password.
It could happen if (farm)config.php, or an included recipe, directly calls the functions Cond Auth?(), or Retrieve Auth Page?(), Page Text Var?(), Page Var?() and possibly others, before defining all passwords and before including Auth User (if required).
The order of config.php is very significant.
Auth User
Can I specify authorization group memberships from with local/config.php?
Yes -- put the group definition into the $AuthUser array (in config.php):
$AuthUser['@editors'] = array('alice', 'carol', 'bob');
Can I have multiple admin group?
Yes, define the groups with array('@admins', '@moderators');
like this:
$DefaultPasswords
['admin'] = array( crypt('masterpass'), # global password
'@admins', '@moderators', # +users in these groups
'id:Fred', 'id:Barney'); # +users Fred and Barney
I'm running multiple wikis under the same domain name, and logins from one wiki are appearing on other wikis. Shouldn't they be independent?
This is caused by the way that PHP treats sessions. See PmWiki.AuthUser#sessions for more details.
Is there any way to record the time of the last login for each user when using Auth User? I need a way to look for stale accounts.
Though every settings seem correct, authentication against LDAP is not working, and there is nothing in ldap log. What's wrong ?
Be sure ldap php module is installed ( on debian apt-get install php(4|5)-ldap ; apache(2)ctl graceful )
The login form asks for username and password, but only password matters.
Make sure you are not entering the admin password when testing the account because, if the password is equal to the admin password, it will authenticate directly through the config.php file and skip any other system.
Do note that even with Auth User activated you can still log in with a blank username and only entering the password. In that case any password you enter will be "accepted" but only passwords which authenticate in the given context will actually give you any authorization rights. Using this capability Auth User comfortably coexists with the default password-based system.
If you want to require both username and password, then you need to set an admin id before including authuser.php:
## Define usernames and passwords. $AuthUser['carol'] = '$1$CknC8zAs$dC8z2vu3UvnIXMfOcGDON0'; ## Enable authentication based on username. include_once('scripts/authuser.php'); # $DefaultPasswords['admin'] = crypt('secret'); $DefaultPasswords['admin'] = 'id:carol';
A username and password will then be required before login is successful.
Is there any way to hide IP addresses once someone has logged in so that registered users can keep their IP addresses invisible to everyone except administrators? - X 1/18/07
Yes, see solution provided at PITS:00400.
Is there a way that people could self-register through Auth User?
You can see HtpasswdForm and AuthUserSignup for two recipes providing this feature.
I would like it that after I have Auth User turned and a user is authenticated to get on my site, that if I have a password put on a particular page or group that they don't get the Auth User form to show up (username and password), but only the typical field for password?
Passwords Admin
There seems to be a default password. What is it?
There isn't any valid password until you set one. Passwords admin describes how to set one.
Pm Wiki comes "out of the box" with $DefaultPasswords
['admin'] set to '*'. This doesn't mean the password is an asterisk, it means that default admin password has to be something that encrypts to an asterisk. Since it's impossible for the crypt() function to ever return a 1-character encrypted value, the admin password is effectively locked until the admin sets one in config.php.
How do I use passwd-formatted files (like .htpasswd) for authentication?
See AuthUser, Cookbook:HtpasswdForm or Cookbook:UserAuth.
Is there anything I can enter in a Group Attributes? field to say 'same as the admin password'? If not, is there anything I can put into the config.php file to have the same effect?
Enter '@lock' in Group Attributes??action=attr to require an admin password for that group.
How do I edit protect, say, all Recent Changes? pages?
How can I read password protect all pages in a group except the Home Page? using configuration files?
As described in PmWiki.GroupCustomizations per-group or per-page configuration files should not be used for defining passwords. The reason is that per-group (or per-page) customization files are only loaded for the current page. So, if $DefaultPasswords['read']
is set in Group A?.php, then someone could use a page in another group to view the contents of pages in Group A?. For example, Main.Wiki Sandbox could contain:
- (:include GroupA.SomePage:)
and because the Group A?.php file wasn't loaded (we're looking at Main.Wiki Sandbox --> local/Main.php), there's no read password set.
How can I password protect the creation of new pages?
See Cookbook:LimitWikiGroups, Cookbook:NewGroupWarning, Cookbook:LimitNewPagesInWikiGroups.
How do I change the password prompt screen?
If your question is about how to make changes to that page... edit Site.AuthForm. If your question is about how to change which page you are sent to when prompted for a password, you might check out the Cookbook:CustomAuthForm for help.
How do I change the prompt on the attributes (?action=attr
) screen?
Simply create a new page at Site.AttrForm?, and add the following line of code to config.php
:
$PageAttrFmt = 'page:Site.Attr Form?';
Note that this only changes the text above the password inputs on the attributes page, but doesn't change the inputs themselves - the inputs have to be dealt with separately. See Cookbook:CustomAttrForm for more info.
I get http error 500 "Internal Server Error" when I try to log in. What's wrong?
This can happen if the encrypted passwords are not created on the web server that hosts the Pm Wiki.
The crypt function changed during the PHP development, e.g. a password encrypted with PHP 5.2 can not be decrypted in PHP 5.1, but PHP 5.2 can decrypt passwords created by PHP 5.1.
This situation normally happens if you prepare everything on your local machine with the latest PHP version and you upload the passwords to a webserver which is running an older version.
The same error occurs when you add encrypted passwords to local/config.php.
Solution: Create the passwords on the system with the oldest PHP version and use them on all other systems.
I only want users to have to create an 'edit' password, which is automatically used for their 'upload' & 'attr' passwords (without them having to set those independently). How do I do this?
By setting $HandleAuth
like so:
$HandleAuth
['upload'] = 'edit'; // And to prevent a Wiki Sandbox from having it's 'attr' permissions changed // except by the admin (but allowing editors to change it on their own pages/group) if(($group=="Site") || ($group=="Main") || ($group=="Category") || ($group=="Site Admin") || ($group=="Pm Wiki") ) {$HandleAuth
['attr'] = 'admin'; // for all main admin pages, set 'attr' to 'admin' password } else {$HandleAuth
['attr'] = 'edit'; // if you can edit, then you can set attr }
Design Notes
Why doesn't Pm Wiki use hierarchical / nested groups?
It essentially comes down to figuring out how to handle page links between nested groups; if someone can figure out an obvious, intuitive way for authors to do that, then nested groups become plausible. See Design Notes and PmWiki:Hierarchical Groups.
Why don't Pm Wiki's scripts have a closing ?> tag?
All of Pm Wiki's scripts now omit the closing ?> tag. The tag is not required, and it avoids problems with unnoticed spaces or blank lines at the end of the file. Also, some file transfer protocols may change the newline character(s) in the file, which can also cause problems. See also the Instruction separation page in the PHP manual.
Does Pm Wiki support WYSIWYG editing (or something like the FCK Editor?)?
Short answer: Pm Wiki provides GUI buttons in a toolbar for common markups, but otherwise does not have WYSIWYG editing. For the reasons why, see PmWiki:WYSIWYG.
Categories: PmWiki Developer
This page may have a more recent version on pmwiki.org: PmWiki:FAQ, and a talk page: PmWiki:FAQ-Talk.