wrapping should be done (default true) * * See includes/tidy/RemexDriver.php for detail on configuration. * * Overriding the default configuration is strongly discouraged in * production. */ $wgTidyConfig = [ 'driver' => 'RemexHtml' ]; /** * Allow raw, unchecked HTML in "..." sections. * THIS IS VERY DANGEROUS on a publicly editable site, so USE $wgGroupPermissions * TO RESTRICT EDITING to only those that you trust */ $wgRawHtml = false; /** * Set a default target for external links, e.g. _blank to pop up a new window. * * This will also set the "noreferrer" and "noopener" link rel to prevent the * attack described at https://mathiasbynens.github.io/rel-noopener/ . * Some older browsers may not support these link attributes, hence * setting $wgExternalLinkTarget to _blank may represent a security risk * to some of your users. */ $wgExternalLinkTarget = false; /** * If true, external URL links in wiki text will be given the * rel="nofollow" attribute as a hint to search engines that * they should not be followed for ranking purposes as they * are user-supplied and thus subject to spamming. */ $wgNoFollowLinks = true; /** * Namespaces in which $wgNoFollowLinks doesn't apply. * See Language.php for a list of namespaces. */ $wgNoFollowNsExceptions = []; /** * If this is set to an array of domains, external links to these domain names * (or any subdomains) will not be set to rel="nofollow" regardless of the * value of $wgNoFollowLinks. For instance: * * $wgNoFollowDomainExceptions = [ 'en.wikipedia.org', 'wiktionary.org', 'mediawiki.org' ]; * * This would add rel="nofollow" to links to de.wikipedia.org, but not * en.wikipedia.org, wiktionary.org, en.wiktionary.org, us.en.wikipedia.org, * etc. * * Defaults to mediawiki.org for the links included in the software by default. */ $wgNoFollowDomainExceptions = [ 'mediawiki.org' ]; /** * Allow DISPLAYTITLE to change title display */ $wgAllowDisplayTitle = true; /** * For consistency, restrict DISPLAYTITLE to text that normalizes to the same * canonical DB key. Also disallow some inline CSS rules like display: none; * which can cause the text to be hidden or unselectable. */ $wgRestrictDisplayTitle = true; /** * Maximum number of calls per parse to expensive parser functions such as * PAGESINCATEGORY. */ $wgExpensiveParserFunctionLimit = 100; /** * Preprocessor caching threshold * Setting it to 'false' will disable the preprocessor cache. */ $wgPreprocessorCacheThreshold = 1000; /** * Enable interwiki transcluding. Only when iw_trans=1 in the interwiki table. */ $wgEnableScaryTranscluding = false; /** * Expiry time for transcluded templates cached in object cache. * Only used $wgEnableInterwikiTranscluding is set to true. */ $wgTranscludeCacheExpiry = 3600; /** * Enable the magic links feature of automatically turning ISBN xxx, * PMID xxx, RFC xxx into links * * @since 1.28 */ $wgEnableMagicLinks = [ 'ISBN' => false, 'PMID' => false, 'RFC' => false ]; /** @} */ # end of parser settings } /************************************************************************//** * @name Statistics * @{ */ /** * Method used to determine if a page in a content namespace should be counted * as a valid article. * * Redirect pages will never be counted as valid articles. * * This variable can have the following values: * - 'any': all pages as considered as valid articles * - 'link': the page must contain a [[wiki link]] to be considered valid * * See also See https://www.mediawiki.org/wiki/Manual:Article_count * * Retroactively changing this variable will not affect the existing count, * to update it, you will need to run the maintenance/updateArticleCount.php * script. */ $wgArticleCountMethod = 'link'; /** * How many days user must be idle before he is considered inactive. Will affect * the number shown on Special:Statistics, Special:ActiveUsers, and the * {{NUMBEROFACTIVEUSERS}} magic word in wikitext. * You might want to leave this as the default value, to provide comparable * numbers between different wikis. */ $wgActiveUserDays = 30; /** @} */ # End of statistics } /************************************************************************//** * @name User accounts, authentication * @{ */ /** * Central ID lookup providers * Key is the provider ID, value is a specification for ObjectFactory * @since 1.27 */ $wgCentralIdLookupProviders = [ 'local' => [ 'class' => LocalIdLookup::class ], ]; /** * Central ID lookup provider to use by default * @var string */ $wgCentralIdLookupProvider = 'local'; /** * Password policy for the wiki. * Structured as * [ * 'policies' => [ => [ => , ... ], ... ], * 'checks' => [ => , ... ], * ] * where is a user group, is a password policy name * (arbitrary string) defined in the 'checks' part, is the * PHP callable implementing the policy check, is an array * of options with the following keys: * - value: (number, boolean or null) the value to pass to the callback * - forceChange: (bool, default false) if the password is invalid, do * not let the user log in without changing the password * - suggestChangeOnLogin: (bool, default false) if true and the password is * invalid, suggest a password change if logging in. If all the failing policies * that apply to the user have this set to false, the password change * screen will not be shown. 'forceChange' takes precedence over * 'suggestChangeOnLogin' if they are both present. * As a shorthand for [ 'value' => ], simply can be written. * When multiple password policies are defined for a user, the settings * arrays are merged, and for fields which are set in both arrays, the * larger value (as understood by PHP's 'max' method) is taken. * * A user's effective policy is the superset of all policy statements * from the policies for the groups where the user is a member. If more * than one group policy include the same policy statement, the value is * the max() of the values. Note true > false. The 'default' policy group * is required, and serves as the minimum policy for all users. * * Callbacks receive three arguments: the policy value, the User object * and the password; and must return a StatusValue. A non-good status * means the password will not be accepted for new accounts, and existing * accounts will be prompted for password change or barred from logging in * (depending on whether the status is a fatal or merely error/warning). * * The checks supported by core are: * - MinimalPasswordLength - Minimum length a user can set. * - MinimumPasswordLengthToLogin - Passwords shorter than this will * not be allowed to login, or offered a chance to reset their password * as part of the login workflow, regardless if it is correct. * - MaximalPasswordLength - maximum length password a user is allowed * to attempt. Prevents DoS attacks with pbkdf2. * - PasswordCannotMatchUsername - Password cannot match the username. * - PasswordCannotBeSubstringInUsername - Password cannot be a substring * (contained within) the username. * - PasswordCannotMatchBlacklist - Username/password combination cannot * match a list of default passwords used by MediaWiki in the past. * Deprecated since 1.35, use PasswordCannotMatchDefaults instead. * - PasswordCannotMatchDefaults - Username/password combination cannot * match a list of default passwords used by MediaWiki in the past. * - PasswordNotInLargeBlacklist - Password not in best practices list of * 100,000 commonly used passwords. Due to the size of the list this * is a probabilistic test. * Deprecated since 1.35, use PasswordNotInCommonList instead. * - PasswordNotInCommonList - Password not in best practices list of * 100,000 commonly used passwords. Due to the size of the list this * is a probabilistic test. * * If you add custom checks, for Special:PasswordPolicies to display them correctly, * every check should have a corresponding passwordpolicies-policy- message, * and every settings field other than 'value' should have a corresponding * passwordpolicies-policyflag- message ( and are in lowercase). * The check message receives the policy value as a parameter, the flag message * receives the flag value (or values if it's an array). * * @since 1.26 * @see PasswordPolicyChecks * @see User::checkPasswordValidity() */ $wgPasswordPolicy = [ 'policies' => [ 'bureaucrat' => [ 'MinimalPasswordLength' => 10, 'MinimumPasswordLengthToLogin' => 1, ], 'sysop' => [ 'MinimalPasswordLength' => 10, 'MinimumPasswordLengthToLogin' => 1, ], 'interface-admin' => [ 'MinimalPasswordLength' => 10, 'MinimumPasswordLengthToLogin' => 1, ], 'bot' => [ 'MinimalPasswordLength' => 10, 'MinimumPasswordLengthToLogin' => 1, ], 'default' => [ 'MinimalPasswordLength' => [ 'value' => 1, 'suggestChangeOnLogin' => true ], 'PasswordCannotMatchUsername' => [ 'value' => true, 'suggestChangeOnLogin' => true ], 'PasswordCannotBeSubstringInUsername' => [ 'value' => true, 'suggestChangeOnLogin' => true ], 'PasswordCannotMatchDefaults' => [ 'value' => true, 'suggestChangeOnLogin' => true ], 'MaximalPasswordLength' => [ 'value' => 4096, 'suggestChangeOnLogin' => true ], 'PasswordNotInCommonList' => [ 'value' => true, 'suggestChangeOnLogin' => true ], ], ], 'checks' => [ 'MinimalPasswordLength' => 'PasswordPolicyChecks::checkMinimalPasswordLength', 'MinimumPasswordLengthToLogin' => 'PasswordPolicyChecks::checkMinimumPasswordLengthToLogin', 'PasswordCannotMatchUsername' => 'PasswordPolicyChecks::checkPasswordCannotMatchUsername', 'PasswordCannotBeSubstringInUsername' => 'PasswordPolicyChecks::checkPasswordCannotBeSubstringInUsername', 'PasswordCannotMatchBlacklist' => 'PasswordPolicyChecks::checkPasswordCannotMatchDefaults', 'PasswordCannotMatchDefaults' => 'PasswordPolicyChecks::checkPasswordCannotMatchDefaults', 'MaximalPasswordLength' => 'PasswordPolicyChecks::checkMaximalPasswordLength', 'PasswordNotInLargeBlacklist' => 'PasswordPolicyChecks::checkPasswordNotInCommonList', 'PasswordNotInCommonList' => 'PasswordPolicyChecks::checkPasswordNotInCommonList', ], ]; /** * Configure AuthManager * * All providers are constructed using ObjectFactory, see that for the general * structure. The array may also contain a key "sort" used to order providers: * providers are stably sorted by this value, which should be an integer * (default is 0). * * Elements are: * - preauth: Array (keys ignored) of specifications for PreAuthenticationProviders * - primaryauth: Array (keys ignored) of specifications for PrimaryAuthenticationProviders * - secondaryauth: Array (keys ignored) of specifications for SecondaryAuthenticationProviders * * @since 1.27 * @note If this is null or empty, the value from $wgAuthManagerAutoConfig is * used instead. Local customization should generally set this variable from * scratch to the desired configuration. Extensions that want to * auto-configure themselves should use $wgAuthManagerAutoConfig instead. */ $wgAuthManagerConfig = null; /** * @see $wgAuthManagerConfig * @since 1.27 */ $wgAuthManagerAutoConfig = [ 'preauth' => [ MediaWiki\Auth\ThrottlePreAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\ThrottlePreAuthenticationProvider::class, 'sort' => 0, ], ], 'primaryauth' => [ // TemporaryPasswordPrimaryAuthenticationProvider should come before // any other PasswordAuthenticationRequest-based // PrimaryAuthenticationProvider (or at least any that might return // FAIL rather than ABSTAIN for a wrong password), or password reset // won't work right. Do not remove this (or change the key) or // auto-configuration of other such providers in extensions will // probably auto-insert themselves in the wrong place. MediaWiki\Auth\TemporaryPasswordPrimaryAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\TemporaryPasswordPrimaryAuthenticationProvider::class, 'args' => [ [ // Fall through to LocalPasswordPrimaryAuthenticationProvider 'authoritative' => false, ] ], 'sort' => 0, ], MediaWiki\Auth\LocalPasswordPrimaryAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\LocalPasswordPrimaryAuthenticationProvider::class, 'args' => [ [ // Last one should be authoritative, or else the user will get // a less-than-helpful error message (something like "supplied // authentication info not supported" rather than "wrong // password") if it too fails. 'authoritative' => true, ] ], 'sort' => 100, ], ], 'secondaryauth' => [ MediaWiki\Auth\CheckBlocksSecondaryAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\CheckBlocksSecondaryAuthenticationProvider::class, 'sort' => 0, ], MediaWiki\Auth\ResetPasswordSecondaryAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\ResetPasswordSecondaryAuthenticationProvider::class, 'sort' => 100, ], // Linking during login is experimental, enable at your own risk - T134952 // MediaWiki\Auth\ConfirmLinkSecondaryAuthenticationProvider::class => [ // 'class' => MediaWiki\Auth\ConfirmLinkSecondaryAuthenticationProvider::class, // 'sort' => 100, // ], MediaWiki\Auth\EmailNotificationSecondaryAuthenticationProvider::class => [ 'class' => MediaWiki\Auth\EmailNotificationSecondaryAuthenticationProvider::class, 'sort' => 200, ], ], ]; /** * Time frame for re-authentication. * * With only password-based authentication, you'd just ask the user to re-enter * their password to verify certain operations like changing the password or * changing the account's email address. But under AuthManager, the user might * not have a password (you might even have to redirect the browser to a * third-party service or something complex like that), you might want to have * both factors of a two-factor authentication, and so on. So, the options are: * - Incorporate the whole multi-step authentication flow within everything * that needs to do this. * - Consider it good if they used Special:UserLogin during this session within * the last X seconds. * - Come up with a third option. * * MediaWiki currently takes the second option. This setting configures the * "X seconds". * * This allows for configuring different time frames for different * "operations". The operations used in MediaWiki core include: * - LinkAccounts * - UnlinkAccount * - ChangeCredentials * - RemoveCredentials * - ChangeEmail * * Additional operations may be used by extensions, either explicitly by * calling AuthManager::securitySensitiveOperationStatus(), * ApiAuthManagerHelper::securitySensitiveOperation() or * SpecialPage::checkLoginSecurityLevel(), or implicitly by overriding * SpecialPage::getLoginSecurityLevel() or by subclassing * AuthManagerSpecialPage. * * The key 'default' is used if a requested operation isn't defined in the array. * * @since 1.27 * @var int[] operation => time in seconds. A 'default' key must always be provided. */ $wgReauthenticateTime = [ 'default' => 300, ]; /** * Whether to allow security-sensitive operations when re-authentication is not possible. * * If AuthManager::canAuthenticateNow() is false (e.g. the current * SessionProvider is not able to change users, such as when OAuth is in use), * AuthManager::securitySensitiveOperationStatus() cannot sensibly return * SEC_REAUTH. Setting an operation true here will have it return SEC_OK in * that case, while setting it false will have it return SEC_FAIL. * * The key 'default' is used if a requested operation isn't defined in the array. * * @since 1.27 * @see $wgReauthenticateTime * @var bool[] operation => boolean. A 'default' key must always be provided. */ $wgAllowSecuritySensitiveOperationIfCannotReauthenticate = [ 'default' => true, ]; /** * List of AuthenticationRequest class names which are not changeable through * Special:ChangeCredentials and the changeauthenticationdata API. * This is only enforced on the client level; AuthManager itself (e.g. * AuthManager::allowsAuthenticationDataChange calls) is not affected. * Class names are checked for exact match (not for subclasses). * @since 1.27 * @var string[] */ $wgChangeCredentialsBlacklist = [ \MediaWiki\Auth\TemporaryPasswordAuthenticationRequest::class ]; /** * List of AuthenticationRequest class names which are not removable through * Special:RemoveCredentials and the removeauthenticationdata API. * This is only enforced on the client level; AuthManager itself (e.g. * AuthManager::allowsAuthenticationDataChange calls) is not affected. * Class names are checked for exact match (not for subclasses). * @since 1.27 * @var string[] */ $wgRemoveCredentialsBlacklist = [ \MediaWiki\Auth\PasswordAuthenticationRequest::class, ]; /** * Specifies the minimal length of a user password. If set to 0, empty pass- * words are allowed. * @deprecated since 1.26, use $wgPasswordPolicy's MinimalPasswordLength. */ $wgMinimalPasswordLength = false; /** * Specifies the maximal length of a user password (T64685). * * It is not recommended to make this greater than the default, as it can * allow DoS attacks by users setting really long passwords. In addition, * this should not be lowered too much, as it enforces weak passwords. * * @warning Unlike other password settings, user with passwords greater than * the maximum will not be able to log in. * @deprecated since 1.26, use $wgPasswordPolicy's MaximalPasswordLength. */ $wgMaximalPasswordLength = false; /** * Specifies if users should be sent to a password-reset form on login, if their * password doesn't meet the requirements of User::isValidPassword(). * @since 1.23 */ $wgInvalidPasswordReset = true; /** * Default password type to use when hashing user passwords. * * Must be set to a type defined in $wgPasswordConfig, or a type that * is registered by default in PasswordFactory.php. * * @since 1.24 */ $wgPasswordDefault = 'pbkdf2'; /** * Configuration for built-in password types. Maps the password type * to an array of options. The 'class' option is the Password class to * use. All other options are class-dependent. * * An advanced example: * @code * $wgPasswordConfig['bcrypt-peppered'] = [ * 'class' => EncryptedPassword::class, * 'underlying' => 'bcrypt', * 'secrets' => [ * hash( 'sha256', 'secret', true ), * ], * 'cipher' => 'aes-256-cbc', * ]; * @endcode * * @since 1.24 */ $wgPasswordConfig = [ 'A' => [ 'class' => MWOldPassword::class, ], 'B' => [ 'class' => MWSaltedPassword::class, ], 'pbkdf2-legacyA' => [ 'class' => LayeredParameterizedPassword::class, 'types' => [ 'A', 'pbkdf2', ], ], 'pbkdf2-legacyB' => [ 'class' => LayeredParameterizedPassword::class, 'types' => [ 'B', 'pbkdf2', ], ], 'bcrypt' => [ 'class' => BcryptPassword::class, 'cost' => 9, ], 'pbkdf2' => [ 'class' => Pbkdf2Password::class, 'algo' => 'sha512', 'cost' => '30000', 'length' => '64', ], 'argon2' => [ 'class' => Argon2Password::class, // Algorithm used: // * 'argon2i' is optimized against side-channel attacks (PHP 7.2+) // * 'argon2id' is optimized against both side-channel and GPU cracking (PHP 7.3+) // * 'auto' to use best available algorithm. If you're using more than one server, be // careful when you're mixing PHP versions because newer PHP might generate hashes that // older versions might would not understand. 'algo' => 'auto', // The parameters below are the same as options accepted by password_hash(). // Set them to override that function's defaults. // // 'memory_cost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST, // 'time_cost' => PASSWORD_ARGON2_DEFAULT_TIME_COST, // 'threads' => PASSWORD_ARGON2_DEFAULT_THREADS, ], ]; /** * Whether to allow password resets ("enter some identifying data, and we'll send an email * with a temporary password you can use to get back into the account") identified by * various bits of data. Setting all of these to false (or the whole variable to false) * has the effect of disabling password resets entirely */ $wgPasswordResetRoutes = [ 'username' => true, 'email' => true, ]; /** * Maximum number of Unicode characters in signature */ $wgMaxSigChars = 255; /** * Behavior of signature validation. Allowed values are: * - 'warning' - invalid signatures cause a warning to be displayed on the preferences page, but * they are still used when signing comments; new invalid signatures can still be saved as normal * - 'new' - existing invalid signatures behave as above; new invalid signatures can't be saved * - 'disallow' - existing invalid signatures are no longer used when signing comments; new invalid * signatures can't be saved * * @since 1.35 */ $wgSignatureValidation = 'warning'; /** * List of lint error codes which don't cause signature validation to fail. * * @see https://www.mediawiki.org/wiki/Help:Lint_errors * @since 1.35 */ $wgSignatureAllowedLintErrors = [ 'obsolete-tag' ]; /** * Maximum number of bytes in username. You want to run the maintenance * script ./maintenance/checkUsernames.php once you have changed this value. */ $wgMaxNameChars = 255; /** * Array of usernames which may not be registered or logged in from * Maintenance scripts can still use these */ $wgReservedUsernames = [ 'MediaWiki default', // Default 'Main Page' and MediaWiki: message pages 'Conversion script', // Used for the old Wikipedia software upgrade 'Maintenance script', // Maintenance scripts which perform editing, image import script 'Template namespace initialisation script', // Used in 1.2->1.3 upgrade 'ScriptImporter', // Default user name used by maintenance/importSiteScripts.php 'Unknown user', // Used in WikiImporter and RevisionStore for revisions with no author 'msg:double-redirect-fixer', // Automatic double redirect fix 'msg:usermessage-editor', // Default user for leaving user messages 'msg:proxyblocker', // For $wgProxyList and Special:Blockme (removed in 1.22) 'msg:sorbs', // For $wgEnableDnsBlacklist etc. 'msg:spambot_username', // Used by cleanupSpam.php 'msg:autochange-username', // Used by anon category RC entries (parser functions, Lua & purges) ]; /** * Settings added to this array will override the default globals for the user * preferences used by anonymous visitors and newly created accounts. * For instance, to disable editing on double clicks: * $wgDefaultUserOptions ['editondblclick'] = 0; */ $wgDefaultUserOptions = [ 'ccmeonemails' => 0, 'date' => 'default', 'diffonly' => 0, 'disablemail' => 0, 'editfont' => 'monospace', 'editondblclick' => 0, 'editsectiononrightclick' => 0, 'email-allow-new-users' => 1, 'enotifminoredits' => 0, 'enotifrevealaddr' => 0, 'enotifusertalkpages' => 1, 'enotifwatchlistpages' => 1, 'extendwatchlist' => 1, 'fancysig' => 0, 'forceeditsummary' => 0, 'gender' => 'unknown', 'hideminor' => 0, 'hidepatrolled' => 0, 'hidecategorization' => 1, 'imagesize' => 2, 'minordefault' => 0, 'newpageshidepatrolled' => 0, 'nickname' => '', 'norollbackdiff' => 0, 'numberheadings' => 0, 'previewonfirst' => 0, 'previewontop' => 1, 'rcdays' => 7, 'rcenhancedfilters-disable' => 0, 'rclimit' => 50, 'search-match-redirect' => true, 'showhiddencats' => 0, 'shownumberswatching' => 1, 'showrollbackconfirmation' => 0, 'skin' => false, 'stubthreshold' => 0, 'thumbsize' => 5, 'underline' => 2, 'uselivepreview' => 0, 'usenewrc' => 1, 'watchcreations' => 1, 'watchdefault' => 1, 'watchdeletion' => 0, 'watchuploads' => 1, 'watchlistdays' => 7.0, 'watchlisthideanons' => 0, 'watchlisthidebots' => 0, 'watchlisthideliu' => 0, 'watchlisthideminor' => 0, 'watchlisthideown' => 0, 'watchlisthidepatrolled' => 0, 'watchlisthidecategorization' => 1, 'watchlistreloadautomatically' => 0, 'watchlistunwatchlinks' => 0, 'watchmoves' => 0, 'watchrollback' => 0, 'wlenhancedfilters-disable' => 0, 'wllimit' => 250, 'useeditwarning' => 1, 'prefershttps' => 1, 'requireemail' => 0, ]; /** * An array of preferences to not show for the user */ $wgHiddenPrefs = []; /** * Characters to prevent during new account creations. * This is used in a regular expression character class during * registration (regex metacharacters like / are escaped). */ $wgInvalidUsernameCharacters = '@:'; /** * Character used as a delimiter when testing for interwiki userrights * (In Special:UserRights, it is possible to modify users on different * databases if the delimiter is used, e.g. "Someuser@enwiki"). * * It is recommended that you have this delimiter in * $wgInvalidUsernameCharacters above, or you will not be able to * modify the user rights of those users via Special:UserRights */ $wgUserrightsInterwikiDelimiter = '@'; /** * This is to let user authenticate using https when they come from http. * Based on an idea by George Herbert on wikitech-l: * https://lists.wikimedia.org/pipermail/wikitech-l/2010-October/050039.html * @since 1.17 */ $wgSecureLogin = false; /** * Versioning for authentication tokens. * * If non-null, this is combined with the user's secret (the user_token field * in the DB) to generate the token cookie. Changing this will invalidate all * active sessions (i.e. it will log everyone out). * * @since 1.27 * @var string|null */ $wgAuthenticationTokenVersion = null; /** * MediaWiki\Session\SessionProvider configuration. * * Value is an array of ObjectFactory specifications for the SessionProviders * to be used. Keys in the array are ignored. Order is not significant. * * @since 1.27 */ $wgSessionProviders = [ MediaWiki\Session\CookieSessionProvider::class => [ 'class' => MediaWiki\Session\CookieSessionProvider::class, 'args' => [ [ 'priority' => 30, 'callUserSetCookiesHook' => true, ] ], ], MediaWiki\Session\BotPasswordSessionProvider::class => [ 'class' => MediaWiki\Session\BotPasswordSessionProvider::class, 'args' => [ [ 'priority' => 75, ] ], ], ]; /** * Temporary feature flag that controls whether users will see a checkbox allowing them to * require providing email during password resets. * * @deprecated This feature is under development, don't assume this flag's existence or function * outside of MediaWiki. */ $wgAllowRequiringEmailForResets = false; /** @} */ # end user accounts } /************************************************************************//** * @name User rights, access control and monitoring * @{ */ /** * Number of seconds before autoblock entries expire. Default 86400 = 1 day. */ $wgAutoblockExpiry = 86400; /** * Set this to true to allow blocked users to edit their own user talk page. * * This only applies to sitewide blocks. Partial blocks always allow users to * edit their own user talk page unless otherwise specified in the block * restrictions. */ $wgBlockAllowsUTEdit = true; /** * Limits on the possible sizes of range blocks. * * CIDR notation is hard to understand, it's easy to mistakenly assume that a * /1 is a small range and a /31 is a large range. For IPv4, setting a limit of * half the number of bits avoids such errors, and allows entire ISPs to be * blocked using a small number of range blocks. * * For IPv6, RFC 3177 recommends that a /48 be allocated to every residential * customer, so range blocks larger than /64 (half the number of bits) will * plainly be required. RFC 4692 implies that a very large ISP may be * allocated a /19 if a generous HD-Ratio of 0.8 is used, so we will use that * as our limit. As of 2012, blocking the whole world would require a /4 range. */ $wgBlockCIDRLimit = [ 'IPv4' => 16, # Blocks larger than a /16 (64k addresses) will not be allowed 'IPv6' => 19, ]; /** * If true, blocked users will not be allowed to login. When using this with * a public wiki, the effect of logging out blocked users may actually be * avers: unless the user's address is also blocked (e.g. auto-block), * logging the user out will again allow reading and editing, just as for * anonymous visitors. */ $wgBlockDisablesLogin = false; /** * Pages anonymous user may see, set as an array of pages titles. * * @par Example: * @code * $wgWhitelistRead = array ( "Main Page", "Wikipedia:Help"); * @endcode * * Special:Userlogin and Special:ChangePassword are always allowed. * * @note This will only work if $wgGroupPermissions['*']['read'] is false -- * see below. Otherwise, ALL pages are accessible, regardless of this setting. * * @note Also that this will only protect _pages in the wiki_. Uploaded files * will remain readable. You can use img_auth.php to protect uploaded files, * see https://www.mediawiki.org/wiki/Manual:Image_Authorization * * @note Extensions should not modify this, but use the TitleReadWhitelist * hook instead. */ $wgWhitelistRead = false; /** * Pages anonymous user may see, set as an array of regular expressions. * * This function will match the regexp against the title name, which * is without underscore. * * @par Example: * To whitelist [[Main Page]]: * @code * $wgWhitelistReadRegexp = [ "/Main Page/" ]; * @endcode * * @note Unless ^ and/or $ is specified, a regular expression might match * pages not intended to be allowed. The above example will also * allow a page named 'Security Main Page'. * * @par Example: * To allow reading any page starting with 'User' regardless of the case: * @code * $wgWhitelistReadRegexp = [ "@^UsEr.*@i" ]; * @endcode * Will allow both [[User is banned]] and [[User:JohnDoe]] * * @note This will only work if $wgGroupPermissions['*']['read'] is false -- * see below. Otherwise, ALL pages are accessible, regardless of this setting. */ $wgWhitelistReadRegexp = false; /** * Should editors be required to have a validated e-mail * address before being allowed to edit? */ $wgEmailConfirmToEdit = false; /** * Should MediaWiki attempt to protect user's privacy when doing redirects? * Keep this true if access counts to articles are made public. */ $wgHideIdentifiableRedirects = true; /** * Permission keys given to users in each group. * * This is an array where the keys are all groups and each value is an * array of the format (right => boolean). * * The second format is used to support per-namespace permissions. * Note that this feature does not fully work for all permission types. * * All users are implicitly in the '*' group including anonymous visitors; * logged-in users are all implicitly in the 'user' group. These will be * combined with the permissions of all groups that a given user is listed * in in the user_groups table. * * Note: Don't set $wgGroupPermissions = []; unless you know what you're * doing! This will wipe all permissions, and may mean that your users are * unable to perform certain essential tasks or access new functionality * when new permissions are introduced and default grants established. * * Functionality to make pages inaccessible has not been extensively tested * for security. Use at your own risk! * * This replaces $wgWhitelistAccount and $wgWhitelistEdit */ $wgGroupPermissions = []; /** @cond file_level_code */ // Implicit group for all visitors $wgGroupPermissions['*']['createaccount'] = true; $wgGroupPermissions['*']['read'] = true; $wgGroupPermissions['*']['edit'] = true; $wgGroupPermissions['*']['createpage'] = true; $wgGroupPermissions['*']['createtalk'] = true; $wgGroupPermissions['*']['writeapi'] = true; $wgGroupPermissions['*']['viewmywatchlist'] = true; $wgGroupPermissions['*']['editmywatchlist'] = true; $wgGroupPermissions['*']['viewmyprivateinfo'] = true; $wgGroupPermissions['*']['editmyprivateinfo'] = true; $wgGroupPermissions['*']['editmyoptions'] = true; # $wgGroupPermissions['*']['patrolmarks'] = false; // let anons see what was patrolled // Implicit group for all logged-in accounts $wgGroupPermissions['user']['move'] = true; $wgGroupPermissions['user']['move-subpages'] = true; $wgGroupPermissions['user']['move-rootuserpages'] = true; // can move root userpages $wgGroupPermissions['user']['move-categorypages'] = true; $wgGroupPermissions['user']['movefile'] = true; $wgGroupPermissions['user']['read'] = true; $wgGroupPermissions['user']['edit'] = true; $wgGroupPermissions['user']['createpage'] = true; $wgGroupPermissions['user']['createtalk'] = true; $wgGroupPermissions['user']['writeapi'] = true; $wgGroupPermissions['user']['upload'] = true; $wgGroupPermissions['user']['reupload'] = true; $wgGroupPermissions['user']['reupload-shared'] = true; $wgGroupPermissions['user']['minoredit'] = true; $wgGroupPermissions['user']['editmyusercss'] = true; $wgGroupPermissions['user']['editmyuserjson'] = true; $wgGroupPermissions['user']['editmyuserjs'] = true; $wgGroupPermissions['user']['editmyuserjsredirect'] = true; $wgGroupPermissions['user']['purge'] = true; $wgGroupPermissions['user']['sendemail'] = true; $wgGroupPermissions['user']['applychangetags'] = true; $wgGroupPermissions['user']['changetags'] = true; $wgGroupPermissions['user']['editcontentmodel'] = true; // Implicit group for accounts that pass $wgAutoConfirmAge $wgGroupPermissions['autoconfirmed']['autoconfirmed'] = true; $wgGroupPermissions['autoconfirmed']['editsemiprotected'] = true; // Users with bot privilege can have their edits hidden // from various log pages by default $wgGroupPermissions['bot']['bot'] = true; $wgGroupPermissions['bot']['autoconfirmed'] = true; $wgGroupPermissions['bot']['editsemiprotected'] = true; $wgGroupPermissions['bot']['nominornewtalk'] = true; $wgGroupPermissions['bot']['autopatrol'] = true; $wgGroupPermissions['bot']['suppressredirect'] = true; $wgGroupPermissions['bot']['apihighlimits'] = true; $wgGroupPermissions['bot']['writeapi'] = true; // Most extra permission abilities go to this group $wgGroupPermissions['sysop']['block'] = true; $wgGroupPermissions['sysop']['createaccount'] = true; $wgGroupPermissions['sysop']['delete'] = true; // can be separately configured for pages with > $wgDeleteRevisionsLimit revs $wgGroupPermissions['sysop']['bigdelete'] = true; // can view deleted history entries, but not see or restore the text $wgGroupPermissions['sysop']['deletedhistory'] = true; // can view deleted revision text $wgGroupPermissions['sysop']['deletedtext'] = true; $wgGroupPermissions['sysop']['undelete'] = true; $wgGroupPermissions['sysop']['editinterface'] = true; $wgGroupPermissions['sysop']['editsitejson'] = true; $wgGroupPermissions['sysop']['edituserjson'] = true; $wgGroupPermissions['sysop']['import'] = true; $wgGroupPermissions['sysop']['importupload'] = true; $wgGroupPermissions['sysop']['move'] = true; $wgGroupPermissions['sysop']['move-subpages'] = true; $wgGroupPermissions['sysop']['move-rootuserpages'] = true; $wgGroupPermissions['sysop']['move-categorypages'] = true; $wgGroupPermissions['sysop']['patrol'] = true; $wgGroupPermissions['sysop']['autopatrol'] = true; $wgGroupPermissions['sysop']['protect'] = true; $wgGroupPermissions['sysop']['editprotected'] = true; $wgGroupPermissions['sysop']['rollback'] = true; $wgGroupPermissions['sysop']['upload'] = true; $wgGroupPermissions['sysop']['reupload'] = true; $wgGroupPermissions['sysop']['reupload-shared'] = true; $wgGroupPermissions['sysop']['unwatchedpages'] = true; $wgGroupPermissions['sysop']['autoconfirmed'] = true; $wgGroupPermissions['sysop']['editsemiprotected'] = true; $wgGroupPermissions['sysop']['ipblock-exempt'] = true; $wgGroupPermissions['sysop']['blockemail'] = true; $wgGroupPermissions['sysop']['markbotedits'] = true; $wgGroupPermissions['sysop']['apihighlimits'] = true; $wgGroupPermissions['sysop']['browsearchive'] = true; $wgGroupPermissions['sysop']['noratelimit'] = true; $wgGroupPermissions['sysop']['movefile'] = true; $wgGroupPermissions['sysop']['unblockself'] = true; $wgGroupPermissions['sysop']['suppressredirect'] = true; # $wgGroupPermissions['sysop']['pagelang'] = true; # $wgGroupPermissions['sysop']['upload_by_url'] = true; $wgGroupPermissions['sysop']['mergehistory'] = true; $wgGroupPermissions['sysop']['managechangetags'] = true; $wgGroupPermissions['sysop']['deletechangetags'] = true; $wgGroupPermissions['interface-admin']['editinterface'] = true; $wgGroupPermissions['interface-admin']['editsitecss'] = true; $wgGroupPermissions['interface-admin']['editsitejson'] = true; $wgGroupPermissions['interface-admin']['editsitejs'] = true; $wgGroupPermissions['interface-admin']['editusercss'] = true; $wgGroupPermissions['interface-admin']['edituserjson'] = true; $wgGroupPermissions['interface-admin']['edituserjs'] = true; // Permission to change users' group assignments $wgGroupPermissions['bureaucrat']['userrights'] = true; $wgGroupPermissions['bureaucrat']['noratelimit'] = true; // Permission to change users' groups assignments across wikis # $wgGroupPermissions['bureaucrat']['userrights-interwiki'] = true; // Permission to export pages including linked pages regardless of $wgExportMaxLinkDepth # $wgGroupPermissions['bureaucrat']['override-export-depth'] = true; # $wgGroupPermissions['sysop']['deletelogentry'] = true; # $wgGroupPermissions['sysop']['deleterevision'] = true; // To hide usernames from users and Sysops $wgGroupPermissions['suppress']['hideuser'] = true; // To hide revisions/log items from users and Sysops $wgGroupPermissions['suppress']['suppressrevision'] = true; // To view revisions/log items hidden from users and Sysops $wgGroupPermissions['suppress']['viewsuppressed'] = true; // For private suppression log access $wgGroupPermissions['suppress']['suppressionlog'] = true; // Basic rights for revision delete $wgGroupPermissions['suppress']['deleterevision'] = true; $wgGroupPermissions['suppress']['deletelogentry'] = true; /** * The developer group is deprecated, but can be activated if need be * to use the 'lockdb' and 'unlockdb' special pages. Those require * that a lock file be defined and creatable/removable by the web * server. */ # $wgGroupPermissions['developer']['siteadmin'] = true; /** @endcond */ /** * Permission keys revoked from users in each group. * * This acts the same way as $wgGroupPermissions above, except that * if the user is in a group here, the permission will be removed from them. * * Improperly setting this could mean that your users will be unable to perform * certain essential tasks, so use at your own risk! */ $wgRevokePermissions = []; /** * Implicit groups, aren't shown on Special:Listusers or somewhere else */ $wgImplicitGroups = [ '*', 'user', 'autoconfirmed' ]; /** * A map of group names that the user is in, to group names that those users * are allowed to add or revoke. * * Setting the list of groups to add or revoke to true is equivalent to "any * group". * * @par Example: * To allow sysops to add themselves to the "bot" group: * @code * $wgGroupsAddToSelf = [ 'sysop' => [ 'bot' ] ]; * @endcode * * @par Example: * Implicit groups may be used for the source group, for instance: * @code * $wgGroupsRemoveFromSelf = [ '*' => true ]; * @endcode * This allows users in the '*' group (i.e. any user) to remove themselves from * any group that they happen to be in. */ $wgGroupsAddToSelf = []; /** * @see $wgGroupsAddToSelf */ $wgGroupsRemoveFromSelf = []; /** * Set of available actions that can be restricted via action=protect * You probably shouldn't change this. * Translated through restriction-* messages. * Title::getRestrictionTypes() will remove restrictions that are not * applicable to a specific title (create and upload) */ $wgRestrictionTypes = [ 'create', 'edit', 'move', 'upload' ]; /** * Rights which can be required for each protection level (via action=protect) * * You can add a new protection level that requires a specific * permission by manipulating this array. The ordering of elements * dictates the order on the protection form's lists. * * - '' will be ignored (i.e. unprotected) * - 'autoconfirmed' is quietly rewritten to 'editsemiprotected' for backwards compatibility * - 'sysop' is quietly rewritten to 'editprotected' for backwards compatibility */ $wgRestrictionLevels = [ '', 'autoconfirmed', 'sysop' ]; /** * Restriction levels that can be used with cascading protection * * A page can only be protected with cascading protection if the * requested restriction level is included in this array. * * 'autoconfirmed' is quietly rewritten to 'editsemiprotected' for backwards compatibility. * 'sysop' is quietly rewritten to 'editprotected' for backwards compatibility. */ $wgCascadingRestrictionLevels = [ 'sysop' ]; /** * Restriction levels that should be considered "semiprotected" * * Certain places in the interface recognize a dichotomy between "protected" * and "semiprotected", without further distinguishing the specific levels. In * general, if anyone can be eligible to edit a protection level merely by * reaching some condition in $wgAutopromote, it should probably be considered * "semiprotected". * * 'autoconfirmed' is quietly rewritten to 'editsemiprotected' for backwards compatibility. * 'sysop' is not changed, since it really shouldn't be here. */ $wgSemiprotectedRestrictionLevels = [ 'autoconfirmed' ]; /** * Set the minimum permissions required to edit pages in each * namespace. If you list more than one permission, a user must * have all of them to edit pages in that namespace. * * @note NS_MEDIAWIKI is implicitly restricted to 'editinterface'. */ $wgNamespaceProtection = []; /** * Pages in namespaces in this array can not be used as templates. * * Elements MUST be numeric namespace ids, you can safely use the MediaWiki * namespaces constants (NS_USER, NS_MAIN...). * * Among other things, this may be useful to enforce read-restrictions * which may otherwise be bypassed by using the template mechanism. */ $wgNonincludableNamespaces = []; /** * Number of seconds an account is required to age before it's given the * implicit 'autoconfirm' group membership. This can be used to limit * privileges of new accounts. * * Accounts created by earlier versions of the software may not have a * recorded creation date, and will always be considered to pass the age test. * * When left at 0, all registered accounts will pass. * * @par Example: * Set automatic confirmation to 10 minutes (which is 600 seconds): * @code * $wgAutoConfirmAge = 600; // ten minutes * @endcode * Set age to one day: * @code * $wgAutoConfirmAge = 3600*24; // one day * @endcode */ $wgAutoConfirmAge = 0; /** * Number of edits an account requires before it is autoconfirmed. * Passing both this AND the time requirement is needed. Example: * * @par Example: * @code * $wgAutoConfirmCount = 50; * @endcode */ $wgAutoConfirmCount = 0; /** * Array containing the conditions of automatic promotion of a user to specific groups. * * The basic syntax for `$wgAutopromote` is: * * $wgAutopromote = [ * 'groupname' => cond, * 'group2' => cond2, * ]; * * A `cond` may be: * - a single condition without arguments: * Note that Autopromote wraps a single non-array value into an array * e.g. `APCOND_EMAILCONFIRMED` OR * [ `APCOND_EMAILCONFIRMED` ] * - a single condition with arguments: * e.g. `[ APCOND_EDITCOUNT, 100 ]` * - a set of conditions: * e.g. `[ 'operand', cond1, cond2, ... ]` * * When constructing a set of conditions, the following conditions are available: * - `&` (**AND**): * promote if user matches **ALL** conditions * - `|` (**OR**): * promote if user matches **ANY** condition * - `^` (**XOR**): * promote if user matches **ONLY ONE OF THE CONDITIONS** * - `!` (**NOT**): * promote if user matces **NO** condition * - [ APCOND_EMAILCONFIRMED ]: * true if user has a confirmed e-mail * - [ APCOND_EDITCOUNT, number of edits ]: * true if user has the at least the number of edits as the passed parameter * - [ APCOND_AGE, seconds since registration ]: * true if the length of time since the user created his/her account * is at least the same length of time as the passed parameter * - [ APCOND_AGE_FROM_EDIT, seconds since first edit ]: * true if the length of time since the user made his/her first edit * is at least the same length of time as the passed parameter * - [ APCOND_INGROUPS, group1, group2, ... ]: * true if the user is a member of each of the passed groups * - [ APCOND_ISIP, ip ]: * true if the user has the passed IP address * - [ APCOND_IPINRANGE, range ]: * true if the user has an IP address in the range of the passed parameter * - [ APCOND_BLOCKED ]: * true if the user is sitewide blocked * - [ APCOND_ISBOT ]: * true if the user is a bot * - similar constructs can be defined by extensions * * The sets of conditions are evaluated recursively, so you can use nested sets of conditions * linked by operands. * * Note that if $wgEmailAuthentication is disabled, APCOND_EMAILCONFIRMED will be true for any * user who has provided an e-mail address. */ $wgAutopromote = [ 'autoconfirmed' => [ '&', [ APCOND_EDITCOUNT, &$wgAutoConfirmCount ], [ APCOND_AGE, &$wgAutoConfirmAge ], ], ]; /** * Automatically add a usergroup to any user who matches certain conditions. * * Does not add the user to the group again if it has been removed. * Also, does not remove the group if the user no longer meets the criteria. * * The format is: * @code * [ event => criteria, ... ] * @endcode * Where event is either: * - 'onEdit' (when user edits) * * Criteria has the same format as $wgAutopromote * * @see $wgAutopromote * @since 1.18 */ $wgAutopromoteOnce = [ 'onEdit' => [], ]; /** * Put user rights log entries for autopromotion in recent changes? * @since 1.18 */ $wgAutopromoteOnceLogInRC = true; /** * $wgAddGroups and $wgRemoveGroups can be used to give finer control over who * can assign which groups at Special:Userrights. * * @par Example: * Bureaucrats can add any group: * @code * $wgAddGroups['bureaucrat'] = true; * @endcode * Bureaucrats can only remove bots and sysops: * @code * $wgRemoveGroups['bureaucrat'] = [ 'bot', 'sysop' ]; * @endcode * Sysops can make bots: * @code * $wgAddGroups['sysop'] = [ 'bot' ]; * @endcode * Sysops can disable other sysops in an emergency, and disable bots: * @code * $wgRemoveGroups['sysop'] = [ 'sysop', 'bot' ]; * @endcode */ $wgAddGroups = []; /** * @see $wgAddGroups */ $wgRemoveGroups = []; /** * A list of available rights, in addition to the ones defined by the core. * For extensions only. */ $wgAvailableRights = []; /** * Optional to restrict deletion of pages with higher revision counts * to users with the 'bigdelete' permission. (Default given to sysops.) */ $wgDeleteRevisionsLimit = 0; /** * Page deletions with > this number of revisions will use the job queue. * Revisions will be archived in batches of (at most) this size, one batch per job. */ $wgDeleteRevisionsBatchSize = 1000; /** * The maximum number of edits a user can have and * can still be hidden by users with the hideuser permission. * This is limited for performance reason. * Set to false to disable the limit. * @since 1.23 */ $wgHideUserContribLimit = 1000; /** * Number of accounts each IP address may create per specified period(s). * * @par Example: * @code * $wgAccountCreationThrottle = [ * // no more than 100 per month * [ * 'count' => 100, * 'seconds' => 30*86400, * ], * // no more than 10 per day * [ * 'count' => 10, * 'seconds' => 86400, * ], * ]; * @endcode * * @warning Requires $wgMainCacheType to be enabled */ $wgAccountCreationThrottle = [ [ 'count' => 0, 'seconds' => 86400, ] ]; /** * Edits matching these regular expressions in body text * will be recognised as spam and rejected automatically. * * There's no administrator override on-wiki, so be careful what you set. :) * May be an array of regexes or a single string for backwards compatibility. * * @see https://en.wikipedia.org/wiki/Regular_expression * * @note Each regex needs a beginning/end delimiter, eg: # or / */ $wgSpamRegex = []; /** * Same as the above except for edit summaries */ $wgSummarySpamRegex = []; /** * Whether to use DNS blacklists in $wgDnsBlacklistUrls to check for open * proxies * @since 1.16 */ $wgEnableDnsBlacklist = false; /** * List of DNS blacklists to use, if $wgEnableDnsBlacklist is true. * * This is an array of either a URL or an array with the URL and a key (should * the blacklist require a key). * * @par Example: * @code * $wgDnsBlacklistUrls = [ * // String containing URL * 'http.dnsbl.sorbs.net.', * // Array with URL and key, for services that require a key * [ 'dnsbl.httpbl.net.', 'mykey' ], * // Array with just the URL. While this works, it is recommended that you * // just use a string as shown above * [ 'opm.tornevall.org.' ] * ]; * @endcode * * @note You should end the domain name with a . to avoid searching your * eventual domain search suffixes. * @since 1.16 */ $wgDnsBlacklistUrls = [ 'http.dnsbl.sorbs.net.' ]; /** * Proxy whitelist, list of addresses that are assumed to be non-proxy despite * what the other methods might say. */ $wgProxyWhitelist = []; /** * IP ranges that should be considered soft-blocked (anon-only, account * creation allowed). The intent is to use this to prevent anonymous edits from * shared resources such as Wikimedia Labs. * @since 1.29 * @var string[] */ $wgSoftBlockRanges = []; /** * Whether to look at the X-Forwarded-For header's list of (potentially spoofed) * IPs and apply IP blocks to them. This allows for IP blocks to work with correctly-configured * (transparent) proxies without needing to block the proxies themselves. */ $wgApplyIpBlocksToXff = false; /** * Simple rate limiter options to brake edit floods. * * Maximum number actions allowed in the given number of seconds; after that * the violating client receives HTTP 500 error pages until the period * elapses. * * @par Example: * Limits per configured per action and then type of users. * @code * $wgRateLimits = [ * 'edit' => [ * 'anon' => [ x, y ], // any and all anonymous edits (aggregate) * 'user' => [ x, y ], // each logged-in user * 'global-user' => [ x, y ], // per username, across all sites (assumes names are global) * 'newbie' => [ x, y ], // each new autoconfirmed accounts; overrides 'user' * 'ip' => [ x, y ], // each anon and recent account, across all sites * 'subnet' => [ x, y ], // ... within a /24 subnet in IPv4 or /64 in IPv6 * 'ip-all' => [ x, y ], // per ip, across all sites * 'subnet-all' => [ x, y ], // ... within a /24 subnet in IPv4 or /64 in IPv6 * 'groupName' => [ x, y ], // by group membership * ] * ]; * @endcode * * @par Normally, the 'noratelimit' right allows a user to bypass any rate * limit checks. This can be disabled on a per-action basis by setting the * special '&can-bypass' key to false in that action's configuration. * @code * $wgRateLimits = [ * 'some-action' => [ * '&can-bypass' => false, * 'user' => [ x, y ], * ]; * @endcode * * @warning Requires that $wgMainCacheType is set to something persistent */ $wgRateLimits = [ // Page edits 'edit' => [ 'ip' => [ 8, 60 ], 'newbie' => [ 8, 60 ], 'user' => [ 90, 60 ], ], // Page moves 'move' => [ 'newbie' => [ 2, 120 ], 'user' => [ 8, 60 ], ], // File uploads 'upload' => [ 'ip' => [ 8, 60 ], 'newbie' => [ 8, 60 ], ], // Page rollbacks 'rollback' => [ 'user' => [ 10, 60 ], 'newbie' => [ 5, 120 ] ], // Triggering password resets emails 'mailpassword' => [ 'ip' => [ 5, 3600 ], ], // Emailing other users using MediaWiki 'emailuser' => [ 'ip' => [ 5, 86400 ], 'newbie' => [ 5, 86400 ], 'user' => [ 20, 86400 ], ], 'changeemail' => [ 'ip-all' => [ 10, 3600 ], 'user' => [ 4, 86400 ] ], // since 1.33 - rate limit email confirmations 'confirmemail' => [ 'ip-all' => [ 10, 3600 ], 'user' => [ 4, 86400 ] ], // Purging pages 'purge' => [ 'ip' => [ 30, 60 ], 'user' => [ 30, 60 ], ], // Purges of link tables 'linkpurge' => [ 'ip' => [ 30, 60 ], 'user' => [ 30, 60 ], ], // Files rendered via thumb.php or thumb_handler.php 'renderfile' => [ 'ip' => [ 700, 30 ], 'user' => [ 700, 30 ], ], // Same as above but for non-standard thumbnails 'renderfile-nonstandard' => [ 'ip' => [ 70, 30 ], 'user' => [ 70, 30 ], ], // Stashing edits into cache before save 'stashedit' => [ 'ip' => [ 30, 60 ], 'newbie' => [ 30, 60 ], ], // Adding or removing change tags 'changetag' => [ 'ip' => [ 8, 60 ], 'newbie' => [ 8, 60 ], ], // Changing the content model of a page 'editcontentmodel' => [ 'newbie' => [ 2, 120 ], 'user' => [ 8, 60 ], ], ]; /** * Array of IPs / CIDR ranges which should be excluded from rate limits. * This may be useful for allowing NAT gateways for conferences, etc. */ $wgRateLimitsExcludedIPs = []; /** * Log IP addresses in the recentchanges table; can be accessed only by * extensions (e.g. CheckUser) or a DB admin * Used for retroactive autoblocks */ $wgPutIPinRC = true; /** * Integer defining default number of entries to show on * special pages which are query-pages such as Special:Whatlinkshere. */ $wgQueryPageDefaultLimit = 50; /** * Limit password attempts to X attempts per Y seconds per IP per account. * * Value is an array of arrays. Each sub-array must have a key for count * (ie count of how many attempts before throttle) and a key for seconds. * If the key 'allIPs' (case sensitive) is present, then the limit is * just per account instead of per IP per account. * * @since 1.27 allIps support and multiple limits added in 1.27. Prior * to 1.27 this only supported having a single throttle. * @warning Requires $wgMainCacheType to be enabled */ $wgPasswordAttemptThrottle = [ // Short term limit [ 'count' => 5, 'seconds' => 300 ], // Long term limit. We need to balance the risk // of somebody using this as a DoS attack to lock someone // out of their account, and someone doing a brute force attack. [ 'count' => 150, 'seconds' => 60 * 60 * 48 ], ]; /** * @var array Map of (grant => right => boolean) * Users authorize consumers (like Apps) to act on their behalf but only with * a subset of the user's normal account rights (signed off on by the user). * The possible rights to grant to a consumer are bundled into groups called * "grants". Each grant defines some rights it lets consumers inherit from the * account they may act on behalf of. Note that a user granting a right does * nothing if that user does not actually have that right to begin with. * @since 1.27 */ $wgGrantPermissions = []; // @TODO: clean up grants // @TODO: auto-include read/editsemiprotected rights? $wgGrantPermissions['basic']['autocreateaccount'] = true; $wgGrantPermissions['basic']['autoconfirmed'] = true; $wgGrantPermissions['basic']['autopatrol'] = true; $wgGrantPermissions['basic']['editsemiprotected'] = true; $wgGrantPermissions['basic']['ipblock-exempt'] = true; $wgGrantPermissions['basic']['nominornewtalk'] = true; $wgGrantPermissions['basic']['patrolmarks'] = true; $wgGrantPermissions['basic']['purge'] = true; $wgGrantPermissions['basic']['read'] = true; $wgGrantPermissions['basic']['writeapi'] = true; $wgGrantPermissions['highvolume']['bot'] = true; $wgGrantPermissions['highvolume']['apihighlimits'] = true; $wgGrantPermissions['highvolume']['noratelimit'] = true; $wgGrantPermissions['highvolume']['markbotedits'] = true; $wgGrantPermissions['editpage']['edit'] = true; $wgGrantPermissions['editpage']['minoredit'] = true; $wgGrantPermissions['editpage']['applychangetags'] = true; $wgGrantPermissions['editpage']['changetags'] = true; $wgGrantPermissions['editprotected'] = $wgGrantPermissions['editpage']; $wgGrantPermissions['editprotected']['editprotected'] = true; // FIXME: Rename editmycssjs to editmyconfig $wgGrantPermissions['editmycssjs'] = $wgGrantPermissions['editpage']; $wgGrantPermissions['editmycssjs']['editmyusercss'] = true; $wgGrantPermissions['editmycssjs']['editmyuserjson'] = true; $wgGrantPermissions['editmycssjs']['editmyuserjs'] = true; $wgGrantPermissions['editmyoptions']['editmyoptions'] = true; $wgGrantPermissions['editmyoptions']['editmyuserjson'] = true; $wgGrantPermissions['editinterface'] = $wgGrantPermissions['editpage']; $wgGrantPermissions['editinterface']['editinterface'] = true; $wgGrantPermissions['editinterface']['edituserjson'] = true; $wgGrantPermissions['editinterface']['editsitejson'] = true; $wgGrantPermissions['editsiteconfig'] = $wgGrantPermissions['editinterface']; $wgGrantPermissions['editsiteconfig']['editusercss'] = true; $wgGrantPermissions['editsiteconfig']['edituserjs'] = true; $wgGrantPermissions['editsiteconfig']['editsitecss'] = true; $wgGrantPermissions['editsiteconfig']['editsitejs'] = true; $wgGrantPermissions['createeditmovepage'] = $wgGrantPermissions['editpage']; $wgGrantPermissions['createeditmovepage']['createpage'] = true; $wgGrantPermissions['createeditmovepage']['createtalk'] = true; $wgGrantPermissions['createeditmovepage']['move'] = true; $wgGrantPermissions['createeditmovepage']['move-rootuserpages'] = true; $wgGrantPermissions['createeditmovepage']['move-subpages'] = true; $wgGrantPermissions['createeditmovepage']['move-categorypages'] = true; $wgGrantPermissions['createeditmovepage']['suppressredirect'] = true; $wgGrantPermissions['uploadfile']['upload'] = true; $wgGrantPermissions['uploadfile']['reupload-own'] = true; $wgGrantPermissions['uploadeditmovefile'] = $wgGrantPermissions['uploadfile']; $wgGrantPermissions['uploadeditmovefile']['reupload'] = true; $wgGrantPermissions['uploadeditmovefile']['reupload-shared'] = true; $wgGrantPermissions['uploadeditmovefile']['upload_by_url'] = true; $wgGrantPermissions['uploadeditmovefile']['movefile'] = true; $wgGrantPermissions['uploadeditmovefile']['suppressredirect'] = true; $wgGrantPermissions['patrol']['patrol'] = true; $wgGrantPermissions['rollback']['rollback'] = true; $wgGrantPermissions['blockusers']['block'] = true; $wgGrantPermissions['blockusers']['blockemail'] = true; $wgGrantPermissions['viewdeleted']['browsearchive'] = true; $wgGrantPermissions['viewdeleted']['deletedhistory'] = true; $wgGrantPermissions['viewdeleted']['deletedtext'] = true; $wgGrantPermissions['viewrestrictedlogs']['suppressionlog'] = true; $wgGrantPermissions['delete'] = $wgGrantPermissions['editpage'] + $wgGrantPermissions['viewdeleted']; $wgGrantPermissions['delete']['delete'] = true; $wgGrantPermissions['delete']['bigdelete'] = true; $wgGrantPermissions['delete']['deletelogentry'] = true; $wgGrantPermissions['delete']['deleterevision'] = true; $wgGrantPermissions['delete']['undelete'] = true; $wgGrantPermissions['oversight']['suppressrevision'] = true; $wgGrantPermissions['protect'] = $wgGrantPermissions['editprotected']; $wgGrantPermissions['protect']['protect'] = true; $wgGrantPermissions['viewmywatchlist']['viewmywatchlist'] = true; $wgGrantPermissions['editmywatchlist']['editmywatchlist'] = true; $wgGrantPermissions['sendemail']['sendemail'] = true; $wgGrantPermissions['createaccount']['createaccount'] = true; $wgGrantPermissions['privateinfo']['viewmyprivateinfo'] = true; $wgGrantPermissions['mergehistory']['mergehistory'] = true; /** * @var array Map of grants to their UI grouping * @since 1.27 */ $wgGrantPermissionGroups = [ // Hidden grants are implicitly present 'basic' => 'hidden', 'editpage' => 'page-interaction', 'createeditmovepage' => 'page-interaction', 'editprotected' => 'page-interaction', 'patrol' => 'page-interaction', 'uploadfile' => 'file-interaction', 'uploadeditmovefile' => 'file-interaction', 'sendemail' => 'email', 'viewmywatchlist' => 'watchlist-interaction', 'editviewmywatchlist' => 'watchlist-interaction', 'editmycssjs' => 'customization', 'editmyoptions' => 'customization', 'editinterface' => 'administration', 'editsiteconfig' => 'administration', 'rollback' => 'administration', 'blockusers' => 'administration', 'delete' => 'administration', 'viewdeleted' => 'administration', 'viewrestrictedlogs' => 'administration', 'protect' => 'administration', 'oversight' => 'administration', 'createaccount' => 'administration', 'mergehistory' => 'administration', 'highvolume' => 'high-volume', 'privateinfo' => 'private-information', ]; /** * @var bool Whether to enable bot passwords * @since 1.27 */ $wgEnableBotPasswords = true; /** * Cluster for the bot_passwords table * @var string|bool If false, the normal cluster will be used * @since 1.27 */ $wgBotPasswordsCluster = false; /** * Database name for the bot_passwords table * * To use a database with a table prefix, set this variable to * "{$database}-{$prefix}". * @var string|bool If false, the normal database will be used * @since 1.27 */ $wgBotPasswordsDatabase = false; /** @} */ # end of user rights settings /************************************************************************//** * @name Proxy scanner settings * @{ */ /** * This should always be customised in LocalSettings.php */ $wgSecretKey = false; /** * Big list of banned IP addresses. * * This can have the following formats: * - An array of addresses * - A string, in which case this is the path to a file * containing the list of IP addresses, one per line */ $wgProxyList = []; /** @} */ # end of proxy scanner settings /************************************************************************//** * @name Cookie settings * @{ */ /** * Default cookie lifetime, in seconds. Setting to 0 makes all cookies session-only. */ $wgCookieExpiration = 30 * 86400; /** * Default login cookie lifetime, in seconds. Setting * $wgExtendLoginCookieExpiration to null will use $wgCookieExpiration to * calculate the cookie lifetime. As with $wgCookieExpiration, 0 will make * login cookies session-only. */ $wgExtendedLoginCookieExpiration = 180 * 86400; /** * Set to set an explicit domain on the login cookies eg, "justthis.domain.org" * or ".any.subdomain.net" */ $wgCookieDomain = ''; /** * Set this variable if you want to restrict cookies to a certain path within * the domain specified by $wgCookieDomain. */ $wgCookiePath = '/'; /** * Whether the "secure" flag should be set on the cookie. This can be: * - true: Set secure flag * - false: Don't set secure flag * - "detect": Set the secure flag if $wgServer is set to an HTTPS URL, * or if $wgForceHTTPS is true. * * If $wgForceHTTPS is true, session cookies will be secure regardless of this * setting. However, other cookies will still be affected. */ $wgCookieSecure = 'detect'; /** * By default, MediaWiki checks if the client supports cookies during the * login process, so that it can display an informative error message if * cookies are disabled. Set this to true if you want to disable this cookie * check. */ $wgDisableCookieCheck = false; /** * Cookies generated by MediaWiki have names starting with this prefix. Set it * to a string to use a custom prefix. Setting it to false causes the database * name to be used as a prefix. */ $wgCookiePrefix = false; /** * Set authentication cookies to HttpOnly to prevent access by JavaScript, * in browsers that support this feature. This can mitigates some classes of * XSS attack. */ $wgCookieHttpOnly = true; /** * The SameSite cookie attribute used for login cookies. This can be "Lax", * "Strict", "None" or empty/null to omit the attribute. * * This only applies to login cookies, since the correct value for other * cookies depends on what kind of cookie it is. * * @since 1.35 * @var string|null */ $wgCookieSameSite = null; /** * If true, when a cross-site cookie with SameSite=None is sent, a legacy * cookie with an "ss0" prefix will also be sent, without SameSite=None. This * is a workaround for broken behaviour in Chrome 51-66 and similar browsers. * * @since 1.35 * @var bool */ $wgUseSameSiteLegacyCookies = false; /** * A list of cookies that vary the cache (for use by extensions) */ $wgCacheVaryCookies = []; /** * Override to customise the session name */ $wgSessionName = false; /** * Whether to set a cookie when a user is autoblocked. Doing so means that a blocked user, even * after logging out and moving to a new IP address, will still be blocked. This cookie will contain * an authentication code if $wgSecretKey is set, or otherwise will just be the block ID (in * which case there is a possibility of an attacker discovering the names of revdeleted users, so * it is best to use this in conjunction with $wgSecretKey being set). */ $wgCookieSetOnAutoblock = true; /** * Whether to set a cookie when a logged-out user is blocked. Doing so means that a blocked user, * even after moving to a new IP address, will still be blocked. This cookie will contain an * authentication code if $wgSecretKey is set, or otherwise will just be the block ID (in which * case there is a possibility of an attacker discovering the names of revdeleted users, so it * is best to use this in conjunction with $wgSecretKey being set). */ $wgCookieSetOnIpBlock = true; /** @} */ # end of cookie settings } /************************************************************************//** * @name Profiling, testing and debugging * * See $wgProfiler for how to enable profiling. * * @{ */ /** * Filename for debug logging. See https://www.mediawiki.org/wiki/How_to_debug * The debug log file should be not be publicly accessible if it is used, as it * may contain private data. */ $wgDebugLogFile = ''; /** * Prefix for debug log lines */ $wgDebugLogPrefix = ''; /** * If true, instead of redirecting, show a page with a link to the redirect * destination. This allows for the inspection of PHP error messages, and easy * resubmission of form data. For developer use only. */ $wgDebugRedirects = false; /** * If true, log debugging data from action=raw and load.php. * This is normally false to avoid overlapping debug entries due to gen=css * and gen=js requests. */ $wgDebugRawPage = false; /** * Send debug data to an HTML comment in the output. * * This may occasionally be useful when supporting a non-technical end-user. * It's more secure than exposing the debug log file to the web, since the * output only contains private data for the current user. But it's not ideal * for development use since data is lost on fatal errors and redirects. */ $wgDebugComments = false; /** * Write SQL queries to the debug log. * * This setting is only used $wgLBFactoryConf['class'] is set to * '\Wikimedia\Rdbms\LBFactorySimple'; otherwise the DBO_DEBUG flag must be set in * the 'flags' option of the database connection to achieve the same functionality. */ $wgDebugDumpSql = false; /** * Performance expectations for DB usage * * @since 1.26 */ $wgTrxProfilerLimits = [ // HTTP GET/HEAD requests. // Master queries should not happen on GET requests 'GET' => [ 'masterConns' => 0, 'writes' => 0, 'readQueryTime' => 5, 'readQueryRows' => 10000 ], // HTTP POST requests. // Master reads and writes will happen for a subset of these. 'POST' => [ 'readQueryTime' => 5, 'writeQueryTime' => 1, 'readQueryRows' => 100000, 'maxAffected' => 1000 ], 'POST-nonwrite' => [ 'writes' => 0, 'readQueryTime' => 5, 'readQueryRows' => 10000 ], // Deferred updates that run after HTTP response is sent for GET requests 'PostSend-GET' => [ 'readQueryTime' => 5, 'writeQueryTime' => 1, 'readQueryRows' => 10000, 'maxAffected' => 1000, // Log master queries under the post-send entry point as they are discouraged 'masterConns' => 0, 'writes' => 0, ], // Deferred updates that run after HTTP response is sent for POST requests 'PostSend-POST' => [ 'readQueryTime' => 5, 'writeQueryTime' => 1, 'readQueryRows' => 100000, 'maxAffected' => 1000 ], // Background job runner 'JobRunner' => [ 'readQueryTime' => 30, 'writeQueryTime' => 5, 'readQueryRows' => 100000, 'maxAffected' => 500 // ballpark of $wgUpdateRowsPerQuery ], // Command-line scripts 'Maintenance' => [ 'writeQueryTime' => 5, 'maxAffected' => 1000 ] ]; /** * Map of string log group names to log destinations. * * If set, wfDebugLog() output for that group will go to that file instead * of the regular $wgDebugLogFile. Useful for enabling selective logging * in production. * * Log destinations may be one of the following: * - false to completely remove from the output, including from $wgDebugLogFile. * - string values specifying a filename or URI. * - associative array with keys: * - 'destination' desired filename or URI. * - 'sample' an integer value, specifying a sampling factor (optional) * - 'level' A \Psr\Log\LogLevel constant, indicating the minimum level * to log (optional, since 1.25) * * @par Example: * @code * $wgDebugLogGroups['redis'] = '/var/log/mediawiki/redis.log'; * @endcode * * @par Advanced example: * @code * $wgDebugLogGroups['memcached'] = [ * 'destination' => '/var/log/mediawiki/memcached.log', * 'sample' => 1000, // log 1 message out of every 1,000. * 'level' => \Psr\Log\LogLevel::WARNING * ]; * @endcode */ $wgDebugLogGroups = []; /** * Default service provider for creating Psr\Log\LoggerInterface instances. * * The value should be an array suitable for use with * ObjectFactory::getObjectFromSpec(). The created object is expected to * implement the MediaWiki\Logger\Spi interface. See ObjectFactory for additional * details. * * Alternately the MediaWiki\Logger\LoggerFactory::registerProvider method can * be called to inject an MediaWiki\Logger\Spi instance into the LoggerFactory * and bypass the use of this configuration variable entirely. * * @par To completely disable logging: * @code * $wgMWLoggerDefaultSpi = [ 'class' => \MediaWiki\Logger\NullSpi::class ]; * @endcode * * @since 1.25 * @var array $wgMWLoggerDefaultSpi * @see MwLogger */ $wgMWLoggerDefaultSpi = [ 'class' => \MediaWiki\Logger\LegacySpi::class, ]; /** * Display debug data at the bottom of the main content area. * * Useful for developers and technical users trying to working on a closed wiki. */ $wgShowDebug = false; /** * Show the contents of $wgHooks in Special:Version */ $wgSpecialVersionShowHooks = false; /** * Whether to show "we're sorry, but there has been a database error" pages. * Displaying errors aids in debugging, but may display information useful * to an attacker. * * @deprecated and nonfunctional since 1.32: set $wgShowExceptionDetails and/or * $wgShowHostnames instead. */ $wgShowSQLErrors = false; /** * If set to true, uncaught exceptions will print the exception message and a * complete stack trace to output. This should only be used for debugging, as it * may reveal private information in function parameters due to PHP's backtrace * formatting. If set to false, only the exception's class will be shown. */ $wgShowExceptionDetails = false; /** * If true, show a backtrace for database errors * * @note This setting only applies when connection errors and query errors are * reported in the normal manner. $wgShowExceptionDetails applies in other cases, * including those in which an uncaught exception is thrown from within the * exception handler. * * @deprecated and nonfunctional since 1.32: set $wgShowExceptionDetails instead. */ $wgShowDBErrorBacktrace = false; /** * If true, send the exception backtrace to the error log */ $wgLogExceptionBacktrace = true; /** * If true, the MediaWiki error handler passes errors/warnings to the default error handler * after logging them. The setting is ignored when the track_errors php.ini flag is true. */ $wgPropagateErrors = true; /** * Expose backend server host names through the API and various HTML comments */ $wgShowHostnames = false; /** * Override server hostname detection with a hardcoded value. * Should be a string, default false. * @since 1.20 */ $wgOverrideHostname = false; /** * If set to true MediaWiki will throw notices for some possible error * conditions and for deprecated functions. */ $wgDevelopmentWarnings = false; /** * Release limitation to wfDeprecated warnings, if set to a release number * development warnings will not be generated for deprecations added in releases * after the limit. */ $wgDeprecationReleaseLimit = false; /** * Profiler configuration. * * To use a profiler, set $wgProfiler in LocalSetings.php. * * Options: * * - 'class' (`string`): The Profiler subclass to use. * Default: ProfilerStub. * - 'sampling' (`int`): Only enable the profiler on one in this many requests. * For requests that are not in the sampling, * the 'class' option will be replaced with ProfilerStub. * Default: `1`. * - 'threshold' (`float`): Only process the recorded data if the total ellapsed * time for a request is more than this number of seconds. * Default: `0.0`. * - 'output' (`string|string[]`): ProfilerOutput subclass or subclasess to use. * Default: `[]`. * * The output classes available in MediaWiki core are: * ProfilerOutputText, ProfilerOutputStats, and ProfilerOutputDump. * * - ProfilerOutputText: outputs profiling data in the web page body as * a comment. You can make the profiling data in HTML render visibly * instead by setting the 'visible' configuration flag. * * - ProfilerOutputStats: outputs profiling data as StatsD metrics. * It expects that $wgStatsdServer is set to the host (or host:port) * of a statsd server. * * - ProfilerOutputDump: outputs dump files that are compatible * with the XHProf gui. It expects that `$wgProfiler['outputDir']` * is set as well. * * Examples: * * @code * $wgProfiler['class'] = ProfilerXhprof::class; * $wgProfiler['output'] = ProfilerOutputText::class; * @endcode * * @code * $wgProfiler['class'] = ProfilerXhprof:class; * $wgProfiler['output'] = [ ProfilerOutputText::class ]; * $wgProfiler['sampling'] = 50; // one every 50 requests * @endcode * * For performance, the profiler is always disabled for CLI scripts as they * could be long running and the data would accumulate. Use the '--profiler' * parameter of maintenance scripts to override this. * * @since 1.17.0 */ $wgProfiler = []; /** * Destination of statsd metrics. * * A host or host:port of a statsd server. Port defaults to 8125. * * If not set, statsd metrics will not be collected. * * @see wfLogProfilingData * @since 1.25 */ $wgStatsdServer = false; /** * Prefix for metric names sent to $wgStatsdServer. * * @see MediaWikiServices::getInstance()->getStatsdDataFactory * @see BufferingStatsdDataFactory * @since 1.25 */ $wgStatsdMetricPrefix = 'MediaWiki'; /** * Sampling rate for statsd metrics as an associative array of patterns and rates. * Patterns are Unix shell patterns (e.g. 'MediaWiki.api.*'). * Rates are sampling probabilities (e.g. 0.1 means 1 in 10 events are sampled). * @since 1.28 */ $wgStatsdSamplingRates = [ 'wanobjectcache:*' => 0.001 ]; /** * InfoAction retrieves a list of transclusion links (both to and from). * This number puts a limit on that query in the case of highly transcluded * templates. */ $wgPageInfoTransclusionLimit = 50; /** * Parser test suite files to be run by parserTests.php when no specific * filename is passed to it. * * Extensions using extension.json will have any *.txt file in a * tests/parser/ directory automatically run. * * Core tests can be added to ParserTestRunner::$coreTestFiles. * * Use full paths. * * @deprecated since 1.30 */ $wgParserTestFiles = []; /** * Allow running of javascript test suites via [[Special:JavaScriptTest]] (such as QUnit). */ $wgEnableJavaScriptTest = false; /** * Overwrite the caching key prefix with custom value. * @since 1.19 */ $wgCachePrefix = false; /** * Display the new debugging toolbar. This also enables profiling on database * queries and other useful output. * Will be ignored if $wgUseFileCache or $wgUseCdn is enabled. * * @since 1.19 */ $wgDebugToolbar = false; /** @} */ # end of profiling, testing and debugging } /************************************************************************//** * @name Search * @{ */ /** * Set this to true to disable the full text search feature. */ $wgDisableTextSearch = false; /** * Set to true to have nicer highlighted text in search results, * by default off due to execution overhead */ $wgAdvancedSearchHighlighting = false; /** * Regexp to match word boundaries, defaults for non-CJK languages * should be empty for CJK since the words are not separate */ $wgSearchHighlightBoundaries = '[\p{Z}\p{P}\p{C}]'; /** * Template for OpenSearch suggestions, defaults to API action=opensearch * * Sites with heavy load would typically have these point to a custom * PHP wrapper to avoid firing up mediawiki for every keystroke * * Placeholders: {searchTerms} * * @deprecated since 1.25 Use $wgOpenSearchTemplates['application/x-suggestions+json'] instead */ $wgOpenSearchTemplate = false; /** * Templates for OpenSearch suggestions, defaults to API action=opensearch * * Sites with heavy load would typically have these point to a custom * PHP wrapper to avoid firing up mediawiki for every keystroke * * Placeholders: {searchTerms} */ $wgOpenSearchTemplates = [ 'application/x-suggestions+json' => false, 'application/x-suggestions+xml' => false, ]; /** * This was previously a used to force empty responses from ApiOpenSearch * with the 'suggest' parameter set. * * @deprecated since 1.35 No longer used */ $wgEnableOpenSearchSuggest = true; /** * Integer defining default number of entries to show on * OpenSearch call. */ $wgOpenSearchDefaultLimit = 10; /** * Minimum length of extract in . Actual extracts will last until the end of sentence. */ $wgOpenSearchDescriptionLength = 100; /** * Expiry time for search suggestion responses */ $wgSearchSuggestCacheExpiry = 1200; /** * If you've disabled search semi-permanently, this also disables updates to the * table. If you ever re-enable, be sure to rebuild the search table. */ $wgDisableSearchUpdate = false; /** * List of namespaces which are searched by default. * * @par Example: * @code * $wgNamespacesToBeSearchedDefault[NS_MAIN] = true; * $wgNamespacesToBeSearchedDefault[NS_PROJECT] = true; * @endcode */ $wgNamespacesToBeSearchedDefault = [ NS_MAIN => true, ]; /** * Disable the internal MySQL-based search, to allow it to be * implemented by an extension instead. */ $wgDisableInternalSearch = false; /** * Set this to a URL to forward search requests to some external location. * If the URL includes '$1', this will be replaced with the URL-encoded * search term. * * @par Example: * To forward to Google you'd have something like: * @code * $wgSearchForwardUrl = * 'https://www.google.com/search?q=$1' . * '&domains=https://example.com' . * '&sitesearch=https://example.com' . * '&ie=utf-8&oe=utf-8'; * @endcode */ $wgSearchForwardUrl = null; /** * Search form behavior. * - true = use Go & Search buttons * - false = use Go button & Advanced search link * * @deprecated since 1.35. Individual skin may optionally continue * supporting it as a local skin config variable. */ $wgUseTwoButtonsSearchForm = true; /** * Array of namespaces to generate a Google sitemap for when the * maintenance/generateSitemap.php script is run, or false if one is to be * generated for all namespaces. */ $wgSitemapNamespaces = false; /** * Custom namespace priorities for sitemaps. Setting this will allow you to * set custom priorities to namespaces when sitemaps are generated using the * maintenance/generateSitemap.php script. * * This should be a map of namespace IDs to priority * @par Example: * @code * $wgSitemapNamespacesPriorities = [ * NS_USER => '0.9', * NS_HELP => '0.0', * ]; * @endcode */ $wgSitemapNamespacesPriorities = false; /** * If true, searches for IP addresses will be redirected to that IP's * contributions page. E.g. searching for "1.2.3.4" will redirect to * [[Special:Contributions/1.2.3.4]] */ $wgEnableSearchContributorsByIP = true; /** @} */ # end of search settings /************************************************************************//** * @name Edit user interface * @{ */ /** * Path to the GNU diff3 utility. If the file doesn't exist, edit conflicts will * fall back to the old behavior (no merging). */ $wgDiff3 = '/usr/bin/diff3'; /** * Path to the GNU diff utility. */ $wgDiff = '/usr/bin/diff'; /** * Which namespaces have special treatment where they should be preview-on-open * Internally only Category: pages apply, but using this extensions (e.g. Semantic MediaWiki) * can specify namespaces of pages they have special treatment for */ $wgPreviewOnOpenNamespaces = [ NS_CATEGORY => true ]; /** * Enable the UniversalEditButton for browsers that support it * (currently only Firefox with an extension) * See http://universaleditbutton.org for more background information */ $wgUniversalEditButton = true; /** * If user doesn't specify any edit summary when making a an edit, MediaWiki * will try to automatically create one. This feature can be disabled by set- * ting this variable false. */ $wgUseAutomaticEditSummaries = true; /** @} */ # end edit UI } /************************************************************************//** * @name Maintenance * See also $wgSiteNotice * @{ */ /** * @cond file_level_code * Set $wgCommandLineMode if it's not set already, to avoid notices */ if ( !isset( $wgCommandLineMode ) ) { $wgCommandLineMode = false; } /** @endcond */ /** * For colorized maintenance script output, is your terminal background dark ? */ $wgCommandLineDarkBg = false; /** * Set this to a string to put the wiki into read-only mode. The text will be * used as an explanation to users. * * This prevents most write operations via the web interface. Cache updates may * still be possible. To prevent database writes completely, use the read_only * option in MySQL. */ $wgReadOnly = null; /** * Set this to true to put the wiki watchlists into read-only mode. * @var bool * @since 1.31 */ $wgReadOnlyWatchedItemStore = false; /** * If this lock file exists (size > 0), the wiki will be forced into read-only mode. * Its contents will be shown to users as part of the read-only warning * message. * * Will default to "{$wgUploadDirectory}/lock_yBgMBwiR" in Setup.php */ $wgReadOnlyFile = false; /** * When you run the web-based upgrade utility, it will tell you what to set * this to in order to authorize the upgrade process. It will subsequently be * used as a password, to authorize further upgrades. * * For security, do not set this to a guessable string. Use the value supplied * by the install/upgrade process. To cause the upgrader to generate a new key, * delete the old key from LocalSettings.php. */ $wgUpgradeKey = false; /** * Fully specified path to git binary */ $wgGitBin = '/usr/bin/git'; /** * Map GIT repository URLs to viewer URLs to provide links in Special:Version * * Key is a pattern passed to preg_match() and preg_replace(), * without the delimiters (which are #) and must match the whole URL. * The value is the replacement for the key (it can contain $1, etc.) * %h will be replaced by the short SHA-1 (7 first chars) and %H by the * full SHA-1 of the HEAD revision. * %r will be replaced with a URL-encoded version of $1. * %R will be replaced with $1 and no URL-encoding * * @since 1.20 */ $wgGitRepositoryViewers = [ 'https://(?:[a-z0-9_]+@)?gerrit.wikimedia.org/r/(?:p/)?(.*)' => 'https://gerrit.wikimedia.org/g/%R/+/%H', 'ssh://(?:[a-z0-9_]+@)?gerrit.wikimedia.org:29418/(.*)' => 'https://gerrit.wikimedia.org/g/%R/+/%H', ]; /** @} */ # End of maintenance } /************************************************************************//** * @name Recent changes, new pages, watchlist and history * @{ */ /** * Recentchanges items are periodically purged; entries older than this many * seconds will go. * Default: 90 days = about three months */ $wgRCMaxAge = 90 * 24 * 3600; /** * Page watchers inactive for more than this many seconds are considered inactive. * Used mainly by action=info. Default: 180 days = about six months. * @since 1.26 */ $wgWatchersMaxAge = 180 * 24 * 3600; /** * If active watchers (per above) are this number or less, do not disclose it. * Left to 1, prevents unprivileged users from knowing for sure that there are 0. * Set to -1 if you want to always complement watchers count with this info. * @since 1.26 */ $wgUnwatchedPageSecret = 1; /** * Filter $wgRCLinkDays by $wgRCMaxAge to avoid showing links for numbers * higher than what will be stored. Note that this is disabled by default * because we sometimes do have RC data which is beyond the limit for some * reason, and some users may use the high numbers to display that data which * is still there. */ $wgRCFilterByAge = false; /** * List of Limits options to list in the Special:Recentchanges and * Special:Recentchangeslinked pages. */ $wgRCLinkLimits = [ 50, 100, 250, 500 ]; /** * List of Days options to list in the Special:Recentchanges and * Special:Recentchangeslinked pages. * * @see ChangesListSpecialPage::getLinkDays */ $wgRCLinkDays = [ 1, 3, 7, 14, 30 ]; /** * Configuration for feeds to which notifications about recent changes will be sent. * * The following feed classes are available by default: * - 'UDPRCFeedEngine' - sends recent changes over UDP to the specified server. * - 'RedisPubSubFeedEngine' - send recent changes to Redis. * * Only 'class' or 'uri' is required. If 'uri' is set instead of 'class', then * RecentChange::getEngine() is used to determine the class. All options are * passed to the constructor. * * Common options: * - 'class' -- The class to use for this feed (must implement RCFeed). * - 'omit_bots' -- Exclude bot edits from the feed. (default: false) * - 'omit_anon' -- Exclude anonymous edits from the feed. (default: false) * - 'omit_user' -- Exclude edits by registered users from the feed. (default: false) * - 'omit_minor' -- Exclude minor edits from the feed. (default: false) * - 'omit_patrolled' -- Exclude patrolled edits from the feed. (default: false) * * FormattedRCFeed-specific options: * - 'uri' -- [required] The address to which the messages are sent. * The uri scheme of this string will be looked up in $wgRCEngines * to determine which FormattedRCFeed class to use. * - 'formatter' -- [required] The class (implementing RCFeedFormatter) which will * produce the text to send. This can also be an object of the class. * Formatters available by default: JSONRCFeedFormatter, XMLRCFeedFormatter, * IRCColourfulRCFeedFormatter. * * IRCColourfulRCFeedFormatter-specific options: * - 'add_interwiki_prefix' -- whether the titles should be prefixed with * the first entry in the $wgLocalInterwikis array * * JSONRCFeedFormatter-specific options: * - 'channel' -- if set, the 'channel' parameter is also set in JSON values. * * @par Examples: * @code * $wgRCFeeds['example'] = [ * 'uri' => 'udp://localhost:1336', * 'formatter' => 'JSONRCFeedFormatter', * 'add_interwiki_prefix' => false, * 'omit_bots' => true, * ]; * @endcode * @code * $wgRCFeeds['example'] = [ * 'uri' => 'udp://localhost:1338', * 'formatter' => 'IRCColourfulRCFeedFormatter', * 'add_interwiki_prefix' => false, * 'omit_bots' => true, * ]; * @endcode * @code * $wgRCFeeds['example'] = [ * 'class' => ExampleRCFeed::class, * ]; * @endcode * * @since 1.22 */ $wgRCFeeds = []; /** * Used by RecentChange::getEngine to find the correct engine for a given URI scheme. * Keys are scheme names, values are names of FormattedRCFeed sub classes. * @since 1.22 */ $wgRCEngines = [ 'redis' => RedisPubSubFeedEngine::class, 'udp' => UDPRCFeedEngine::class, ]; /** * Treat category membership changes as a RecentChange. * Changes are mentioned in RC for page actions as follows: * - creation: pages created with categories are mentioned * - edit: category additions/removals to existing pages are mentioned * - move: nothing is mentioned (unless templates used depend on the title) * - deletion: nothing is mentioned * - undeletion: nothing is mentioned * * @since 1.27 */ $wgRCWatchCategoryMembership = false; /** * Use RC Patrolling to check for vandalism (from recent changes and watchlists) * New pages and new files are included. * * @note If you disable all patrolling features, you probably also want to * remove 'patrol' from $wgFilterLogTypes so a show/hide link isn't shown on * Special:Log. */ $wgUseRCPatrol = true; /** * Polling rate, in seconds, used by the 'live update' and 'view newest' features * of the RCFilters app on SpecialRecentChanges and Special:Watchlist. * 0 to disable completely. */ $wgStructuredChangeFiltersLiveUpdatePollingRate = 3; /** * Use new page patrolling to check new pages on Special:Newpages * * @note If you disable all patrolling features, you probably also want to * remove 'patrol' from $wgFilterLogTypes so a show/hide link isn't shown on * Special:Log. */ $wgUseNPPatrol = true; /** * Use file patrolling to check new files on Special:Newfiles * * @note If you disable all patrolling features, you probably also want to * remove 'patrol' from $wgFilterLogTypes so a show/hide link isn't shown on * Special:Log. * * @since 1.27 */ $wgUseFilePatrol = true; /** * Provide syndication feeds (RSS, Atom) for, e.g., Recentchanges, Newpages */ $wgFeed = true; /** * Set maximum number of results to return in syndication feeds (RSS, Atom) for * eg Recentchanges, Newpages. */ $wgFeedLimit = 50; /** * _Minimum_ timeout for cached Recentchanges feed, in seconds. * A cached version will continue to be served out even if changes * are made, until this many seconds runs out since the last render. * * If set to 0, feed caching is disabled. Use this for debugging only; * feed generation can be pretty slow with diffs. */ $wgFeedCacheTimeout = 60; /** * When generating Recentchanges RSS/Atom feed, diffs will not be generated for * pages larger than this size. */ $wgFeedDiffCutoff = 32768; /** * Override the site's default RSS/ATOM feed for recentchanges that appears on * every page. Some sites might have a different feed they'd like to promote * instead of the RC feed (maybe like a "Recent New Articles" or "Breaking news" one). * Should be a format as key (either 'rss' or 'atom') and an URL to the feed * as value. * @par Example: * Configure the 'atom' feed to https://example.com/somefeed.xml * @code * $wgSiteFeed['atom'] = "https://example.com/somefeed.xml"; * @endcode */ $wgOverrideSiteFeed = []; /** * Available feeds objects. * Should probably only be defined when a page is syndicated ie when * $wgOut->isSyndicated() is true. */ $wgFeedClasses = [ 'rss' => RSSFeed::class, 'atom' => AtomFeed::class, ]; /** * Which feed types should we provide by default? This can include 'rss', * 'atom', neither, or both. */ $wgAdvertisedFeedTypes = [ 'atom' ]; /** * Show watching users in recent changes, watchlist and page history views */ $wgRCShowWatchingUsers = false; # UPO /** * Show the amount of changed characters in recent changes */ $wgRCShowChangedSize = true; /** * If the difference between the character counts of the text * before and after the edit is below that value, the value will be * highlighted on the RC page. */ $wgRCChangedSizeThreshold = 500; /** * Show "Updated (since my last visit)" marker in RC view, watchlist and history * view for watched pages with new changes */ $wgShowUpdatedMarker = true; /** * Disable links to talk pages of anonymous users (IPs) in listings on special * pages like page history, Special:Recentchanges, etc. */ $wgDisableAnonTalk = false; /** * Allow filtering by change tag in recentchanges, history, etc * Has no effect if no tags are defined in valid_tag. */ $wgUseTagFilter = true; /** * List of core tags to enable. Available tags are: * - 'mw-contentmodelchange': Edit changes content model of a page * - 'mw-new-redirect': Edit makes new redirect page (new page or by changing content page) * - 'mw-removed-redirect': Edit changes an existing redirect into a non-redirect * - 'mw-changed-redirect-target': Edit changes redirect target * - 'mw-blank': Edit completely blanks the page * - 'mw-replace': Edit removes more than 90% of the content * - 'mw-rollback': Edit is a rollback, made through the rollback link or rollback API * - 'mw-undo': Edit made through an undo link * * @var array * @since 1.31 */ $wgSoftwareTags = [ 'mw-contentmodelchange' => true, 'mw-new-redirect' => true, 'mw-removed-redirect' => true, 'mw-changed-redirect-target' => true, 'mw-blank' => true, 'mw-replace' => true, 'mw-rollback' => true, 'mw-undo' => true, ]; /** * If set to an integer, pages that are watched by this many users or more * will not require the unwatchedpages permission to view the number of * watchers. * * @since 1.21 */ $wgUnwatchedPageThreshold = false; /** * Flags (letter symbols) shown in recent changes and watchlist to indicate * certain types of edits. * * To register a new one: * @code * $wgRecentChangesFlags['flag'] => [ * // message for the letter displayed next to rows on changes lists * 'letter' => 'letter-msg', * // message for the tooltip of the letter * 'title' => 'tooltip-msg', * // optional (defaults to 'tooltip-msg'), message to use in the legend box * 'legend' => 'legend-msg', * // optional (defaults to 'flag'), CSS class to put on changes lists rows * 'class' => 'css-class', * // optional (defaults to 'any'), how top-level flag is determined. 'any' * // will set the top-level flag if any line contains the flag, 'all' will * // only be set if all lines contain the flag. * 'grouping' => 'any', * ]; * @endcode * * @since 1.22 */ $wgRecentChangesFlags = [ 'newpage' => [ 'letter' => 'newpageletter', 'title' => 'recentchanges-label-newpage', 'legend' => 'recentchanges-legend-newpage', 'grouping' => 'any', ], 'minor' => [ 'letter' => 'minoreditletter', 'title' => 'recentchanges-label-minor', 'legend' => 'recentchanges-legend-minor', 'class' => 'minoredit', 'grouping' => 'all', ], 'bot' => [ 'letter' => 'boteditletter', 'title' => 'recentchanges-label-bot', 'legend' => 'recentchanges-legend-bot', 'class' => 'botedit', 'grouping' => 'all', ], 'unpatrolled' => [ 'letter' => 'unpatrolledletter', 'title' => 'recentchanges-label-unpatrolled', 'legend' => 'recentchanges-legend-unpatrolled', 'grouping' => 'any', ], ]; /** @} */ # end RC/watchlist } /************************************************************************//** * @name Copyright and credits settings * @{ */ /** * Override for copyright metadata. * * This is the name of the page containing information about the wiki's copyright status, * which will be added as a link in the footer if it is specified. It overrides * $wgRightsUrl if both are specified. */ $wgRightsPage = null; /** * Set this to specify an external URL containing details about the content license used on your * wiki. * If $wgRightsPage is set then this setting is ignored. */ $wgRightsUrl = null; /** * If either $wgRightsUrl or $wgRightsPage is specified then this variable gives the text for the * link. Otherwise, it will be treated as raw HTML. * If using $wgRightsUrl then this value must be specified. If using $wgRightsPage then the name * of the page will also be used as the link if this variable is not set. */ $wgRightsText = null; /** * Override for copyright metadata. */ $wgRightsIcon = null; /** * Set this to true if you want detailed copyright information forms on Upload. */ $wgUseCopyrightUpload = false; /** * Set this to the number of authors that you want to be credited below an * article text. Set it to zero to hide the attribution block, and a negative * number (like -1) to show all authors. Note that this will require 2-3 extra * database hits, which can have a not insignificant impact on performance for * large wikis. */ $wgMaxCredits = 0; /** * If there are more than $wgMaxCredits authors, show $wgMaxCredits of them. * Otherwise, link to a separate credits page. */ $wgShowCreditsIfMax = true; /** @} */ # end of copyright and credits settings } /************************************************************************//** * @name Import / Export * @{ */ /** * List of interwiki prefixes for wikis we'll accept as sources for * Special:Import and API action=import. Since complete page history can be * imported, these should be 'trusted'. * * This can either be a regular array, or an associative map specifying * subprojects on the interwiki map of the target wiki, or a mix of the two, * e.g. * @code * $wgImportSources = [ * 'wikipedia' => [ 'cs', 'en', 'fr', 'zh' ], * 'wikispecies', * 'wikia' => [ 'animanga', 'brickipedia', 'desserts' ], * ]; * @endcode * * If you have a very complex import sources setup, you can lazy-load it using * the ImportSources hook. * * If a user has the 'import' permission but not the 'importupload' permission, * they will only be able to run imports through this transwiki interface. */ $wgImportSources = []; /** * Optional default target namespace for interwiki imports. * Can use this to create an incoming "transwiki"-style queue. * Set to numeric key, not the name. * * Users may override this in the Special:Import dialog. */ $wgImportTargetNamespace = null; /** * If set to false, disables the full-history option on Special:Export. * This is currently poorly optimized for long edit histories, so is * disabled on Wikimedia's sites. */ $wgExportAllowHistory = true; /** * If set nonzero, Special:Export requests for history of pages with * more revisions than this will be rejected. On some big sites things * could get bogged down by very very long pages. */ $wgExportMaxHistory = 0; /** * Return distinct author list (when not returning full history) */ $wgExportAllowListContributors = false; /** * If non-zero, Special:Export accepts a "pagelink-depth" parameter * up to this specified level, which will cause it to include all * pages linked to from the pages you specify. Since this number * can become *insanely large* and could easily break your wiki, * it's disabled by default for now. * * @warning There's a HARD CODED limit of 5 levels of recursion to prevent a * crazy-big export from being done by someone setting the depth number too * high. In other words, last resort safety net. */ $wgExportMaxLinkDepth = 0; /** * Whether to allow the "export all pages in namespace" option */ $wgExportFromNamespaces = false; /** * Whether to allow exporting the entire wiki into a single file */ $wgExportAllowAll = false; /** * Maximum number of pages returned by the GetPagesFromCategory and * GetPagesFromNamespace functions. * * @since 1.27 */ $wgExportPagelistLimit = 5000; /** @} */ # end of import/export } /*************************************************************************//** * @name Extensions * @{ */ /** * A list of callback functions which are called once MediaWiki is fully * initialised */ $wgExtensionFunctions = []; /** * Extension messages files. * * Associative array mapping extension name to the filename where messages can be * found. The file should contain variable assignments. Any of the variables * present in languages/messages/MessagesEn.php may be defined, but $messages * is the most common. * * Variables defined in extensions will override conflicting variables defined * in the core. * * Since MediaWiki 1.23, use of this variable to define messages is discouraged; instead, store * messages in JSON format and use $wgMessagesDirs. For setting other variables than * $messages, $wgExtensionMessagesFiles should still be used. Use a DIFFERENT key because * any entry having a key that also exists in $wgMessagesDirs will be ignored. * * Extensions using the JSON message format can preserve backward compatibility with * earlier versions of MediaWiki by using a compatibility shim, such as one generated * by the generateJsonI18n.php maintenance script, listing it under the SAME key * as for the $wgMessagesDirs entry. * * @par Example: * @code * $wgExtensionMessagesFiles['ConfirmEdit'] = __DIR__.'/ConfirmEdit.i18n.php'; * @endcode */ $wgExtensionMessagesFiles = []; /** * Extension messages directories. * * Associative array mapping extension name to the path of the directory where message files can * be found. The message files are expected to be JSON files named for their language code, e.g. * en.json, de.json, etc. Extensions with messages in multiple places may specify an array of * message directories. * * Message directories in core should be added to LocalisationCache::getMessagesDirs() * * @par Simple example: * @code * $wgMessagesDirs['Example'] = __DIR__ . '/i18n'; * @endcode * * @par Complex example: * @code * $wgMessagesDirs['Example'] = [ * __DIR__ . '/lib/ve/i18n', * __DIR__ . '/lib/ooui/i18n', * __DIR__ . '/i18n', * ] * @endcode * @since 1.23 */ $wgMessagesDirs = []; /** * Array of files with list(s) of extension entry points to be used in * maintenance/mergeMessageFileList.php * @since 1.22 */ $wgExtensionEntryPointListFiles = []; /** * Parser output hooks. * This is an associative array where the key is an extension-defined tag * (typically the extension name), and the value is a PHP callback. * These will be called as an OutputPageParserOutput hook, if the relevant * tag has been registered with the parser output object. * * Registration is done with $pout->addOutputHook( $tag, $data ). * * The callback has the form: * @code * function outputHook( $outputPage, $parserOutput, $data ) { ... } * @endcode */ $wgParserOutputHooks = []; /** * Whether to include the NewPP limit report as a HTML comment */ $wgEnableParserLimitReporting = true; /** * List of valid skin names * * The key should be the name in all lower case. * * As of 1.35, the value should be a an array in the form of the ObjectFactory specification. * * For example for 'foobarskin' where the PHP class is 'MediaWiki\Skins\FooBar\FooBarSkin' set: * * @par skin.json Example: * @code * "ValidSkinNames": { * "foobarskin": { * "displayname": "FooBarSkin", * "class": "MediaWiki\\Skins\\FooBar\\FooBarSkin" * } * } * @endcode * * Historically, the value was a properly cased name for the skin (and is still currently * supported). This value will be prefixed with "Skin" to create the class name of the * skin to load. Use Skin::getSkinNames() as an accessor if you wish to have access to the * full list. */ $wgValidSkinNames = []; /** * Special page list. This is an associative array mapping the (canonical) names of * special pages to either a class name to be instantiated, or a callback to use for * creating the special page object. In both cases, the result must be an instance of * SpecialPage. */ $wgSpecialPages = []; /** * Array mapping class names to filenames, for autoloading. */ $wgAutoloadClasses = $wgAutoloadClasses ?? []; /** * Switch controlling legacy case-insensitive classloading. * Do not disable if your wiki must support data created by PHP4, or by * MediaWiki 1.4 or earlier. * * @deprecated since 1.35 */ $wgAutoloadAttemptLowercase = false; /** * Add information about an installed extension, keyed by its type. * * This is for use from LocalSettings.php and legacy PHP-entrypoint * extensions. In general, extensions should (only) declare this * information in their extension.json file. * * The 'name', 'path' and 'author' keys are required. * * @code * $wgExtensionCredits['other'][] = [ * 'path' => __FILE__, * 'name' => 'Example extension', * 'namemsg' => 'exampleextension-name', * 'author' => [ * 'Foo Barstein', * ], * 'version' => '0.0.1', * 'url' => 'https://example.org/example-extension/', * 'descriptionmsg' => 'exampleextension-desc', * 'license-name' => 'GPL-2.0-or-later', * ]; * @endcode * * The extensions are listed on Special:Version. This page also looks for a file * named COPYING or LICENSE (optional .txt extension) and provides a link to * view said file. When the 'license-name' key is specified, this file is * interpreted as wikitext. * * - $type: One of 'specialpage', 'parserhook', 'variable', 'media', 'antispam', * 'skin', 'api', or 'other', or any additional types as specified through the * ExtensionTypes hook as used in SpecialVersion::getExtensionTypes(). * * - name: Name of extension as an inline string instead of localizable message. * Do not omit this even if 'namemsg' is provided, as it is used to override * the path Special:Version uses to find extension's license info, and is * required for backwards-compatibility with MediaWiki 1.23 and older. * * - namemsg (since MW 1.24): A message key for a message containing the * extension's name, if the name is localizable. (For example, skin names * usually are.) * * - author: A string or an array of strings. Authors can be linked using * the regular wikitext link syntax. To have an internationalized version of * "and others" show, add an element "...". This element can also be linked, * for instance "[https://example ...]". * * - descriptionmsg: A message key or an an array with message key and parameters: * `'descriptionmsg' => 'exampleextension-desc',` * * - description: Description of extension as an inline string instead of * localizable message (omit in favour of 'descriptionmsg'). * * - license-name: Short name of the license (used as label for the link), such * as "GPL-2.0-or-later" or "MIT" (https://spdx.org/licenses/ for a list of identifiers). * * @see SpecialVersion::getCredits */ $wgExtensionCredits = []; /** * Global list of hooks. * * The key is one of the events made available by MediaWiki, you can find * a description for most of them in docs/hooks.txt. The array is used * internally by Hook:run(). * * The value can be one of: * * - A function name: * @code * $wgHooks['event_name'][] = $function; * @endcode * - A function with some data: * @code * $wgHooks['event_name'][] = [ $function, $data ]; * @endcode * - A an object method: * @code * $wgHooks['event_name'][] = [ $object, 'method' ]; * @endcode * - A closure: * @code * $wgHooks['event_name'][] = function ( $hookParam ) { * // Handler code goes here. * }; * @endcode * * @warning You should always append to an event array or you will end up * deleting a previous registered hook. * * @warning Hook handlers should be registered at file scope. Registering * handlers after file scope can lead to unexpected results due to caching. */ $wgHooks = []; /** * List of service wiring files to be loaded by the default instance of MediaWikiServices. * Each file listed here is expected to return an associative array mapping service names * to instantiator functions. Extensions may add wiring files to define their own services. * However, this cannot be used to replace existing services - use the MediaWikiServices * hook for that. * * @see MediaWikiServices * @see ServiceContainer::loadWiringFiles() for details on loading service instantiator functions. * @see docs/Injection.md for an overview of dependency injection in MediaWiki. */ $wgServiceWiringFiles = [ __DIR__ . '/ServiceWiring.php' ]; /** * Maps jobs to their handlers; extensions * can add to this to provide custom jobs. * A job handler should either be a class name to be instantiated, * or (since 1.30) a callback to use for creating the job object. * The callback takes (Title, array map of parameters) as arguments. */ $wgJobClasses = [ 'deletePage' => DeletePageJob::class, 'refreshLinks' => RefreshLinksJob::class, 'deleteLinks' => DeleteLinksJob::class, 'htmlCacheUpdate' => HTMLCacheUpdateJob::class, 'sendMail' => EmaillingJob::class, 'enotifNotify' => EnotifNotifyJob::class, 'fixDoubleRedirect' => DoubleRedirectJob::class, 'AssembleUploadChunks' => AssembleUploadChunksJob::class, 'PublishStashedFile' => PublishStashedFileJob::class, 'ThumbnailRender' => ThumbnailRenderJob::class, 'recentChangesUpdate' => RecentChangesUpdateJob::class, 'refreshLinksPrioritized' => RefreshLinksJob::class, 'refreshLinksDynamic' => RefreshLinksJob::class, 'activityUpdateJob' => ActivityUpdateJob::class, 'categoryMembershipChange' => CategoryMembershipChangeJob::class, 'clearUserWatchlist' => ClearUserWatchlistJob::class, 'watchlistExpiry' => WatchlistExpiryJob::class, 'cdnPurge' => CdnPurgeJob::class, 'userGroupExpiry' => UserGroupExpiryJob::class, 'clearWatchlistNotifications' => ClearWatchlistNotificationsJob::class, 'userOptionsUpdate' => UserOptionsUpdateJob::class, 'enqueue' => EnqueueJob::class, // local queue for multi-DC setups 'null' => NullJob::class, ]; /** * Jobs that must be explicitly requested, i.e. aren't run by job runners unless * special flags are set. The values here are keys of $wgJobClasses. * * These can be: * - Very long-running jobs. * - Jobs that you would never want to run as part of a page rendering request. * - Jobs that you want to run on specialized machines ( like transcoding, or a particular * machine on your cluster has 'outside' web access you could restrict uploadFromUrl ) * These settings should be global to all wikis. */ $wgJobTypesExcludedFromDefaultQueue = [ 'AssembleUploadChunks', 'PublishStashedFile' ]; /** * Map of job types to how many job "work items" should be run per second * on each job runner process. The meaning of "work items" varies per job, * but typically would be something like "pages to update". A single job * may have a variable number of work items, as is the case with batch jobs. * This is used by runJobs.php and not jobs run via $wgJobRunRate. * These settings should be global to all wikis. * @var float[] */ $wgJobBackoffThrottling = []; /** * Make job runners commit changes for replica DB-lag prone jobs one job at a time. * This is useful if there are many job workers that race on replica DB lag checks. * If set, jobs taking this many seconds of DB write time have serialized commits. * * Note that affected jobs may have worse lock contention. Also, if they affect * several DBs at once they may have a smaller chance of being atomic due to the * possibility of connection loss while queueing up to commit. Affected jobs may * also fail due to the commit lock acquisition timeout. * * @var float|bool * @since 1.26 */ $wgJobSerialCommitThreshold = false; /** * Map of job types to configuration arrays. * This determines which queue class and storage system is used for each job type. * Job types that do not have explicit configuration will use the 'default' config. * These settings should be global to all wikis. */ $wgJobTypeConf = [ 'default' => [ 'class' => JobQueueDB::class, 'order' => 'random', 'claimTTL' => 3600 ], ]; /** * Whether to include the number of jobs that are queued * for the API's maxlag parameter. * The total number of jobs will be divided by this to get an * estimated second of maxlag. Typically bots backoff at maxlag=5, * so setting this to the max number of jobs that should be in your * queue divided by 5 should have the effect of stopping bots once * that limit is hit. * * @since 1.29 */ $wgJobQueueIncludeInMaxLagFactor = false; /** * Additional functions to be performed with updateSpecialPages. * Expensive Querypages are already updated. */ $wgSpecialPageCacheUpdates = [ 'Statistics' => [ SiteStatsUpdate::class, 'cacheUpdate' ] ]; /** * Page property link table invalidation lists. When a page property * changes, this may require other link tables to be updated (eg * adding __HIDDENCAT__ means the hiddencat tracking category will * have been added, so the categorylinks table needs to be rebuilt). * This array can be added to by extensions. */ $wgPagePropLinkInvalidations = [ 'hiddencat' => 'categorylinks', ]; /** @} */ # End extensions } /*************************************************************************//** * @name Categories * @{ */ /** * Use experimental, DMOZ-like category browser */ $wgUseCategoryBrowser = false; /** * On category pages, show thumbnail gallery for images belonging to that * category instead of listing them as articles. */ $wgCategoryMagicGallery = true; /** * Paging limit for categories */ $wgCategoryPagingLimit = 200; /** * Specify how category names should be sorted, when listed on a category page. * A sorting scheme is also known as a collation. * * Available values are: * * - uppercase: Converts the category name to upper case, and sorts by that. * * - identity: Does no conversion. Sorts by binary value of the string. * * - uca-default: Provides access to the Unicode Collation Algorithm with * the default element table. This is a compromise collation which sorts * all languages in a mediocre way. However, it is better than "uppercase". * * To use the uca-default collation, you must have PHP's intl extension * installed. See https://www.php.net/manual/en/intl.setup.php . The details of the * resulting collation will depend on the version of ICU installed on the * server. * * After you change this, you must run maintenance/updateCollation.php to fix * the sort keys in the database. * * Extensions can define there own collations by subclassing Collation * and using the Collation::factory hook. */ $wgCategoryCollation = 'uppercase'; /** @} */ # End categories } /*************************************************************************//** * @name Logging * @{ */ /** * The logging system has two levels: an event type, which describes the * general category and can be viewed as a named subset of all logs; and * an action, which is a specific kind of event that can exist in that * log type. * * Note that code should call LogPage::validTypes() to get a list of valid * log types instead of checking the global variable. */ $wgLogTypes = [ '', 'block', 'protect', 'rights', 'delete', 'upload', 'move', 'import', 'patrol', 'merge', 'suppress', 'tag', 'managetags', 'contentmodel', ]; /** * This restricts log access to those who have a certain right * Users without this will not see it in the option menu and can not view it * Restricted logs are not added to recent changes * Logs should remain non-transcludable * Format: logtype => permissiontype */ $wgLogRestrictions = [ 'suppress' => 'suppressionlog' ]; /** * Show/hide links on Special:Log will be shown for these log types. * * This is associative array of log type => boolean "hide by default" * * See $wgLogTypes for a list of available log types. * * @par Example: * @code * $wgFilterLogTypes = [ 'move' => true, 'import' => false ]; * @endcode * * Will display show/hide links for the move and import logs. Move logs will be * hidden by default unless the link is clicked. Import logs will be shown by * default, and hidden when the link is clicked. * * A message of the form logeventslist-[type]-log should be added, and will be * used for the link text. */ $wgFilterLogTypes = [ 'patrol' => true, 'tag' => true, 'newusers' => false, ]; /** * Lists the message key string for each log type. The localized messages * will be listed in the user interface. * * Extensions with custom log types may add to this array. * * @since 1.19, if you follow the naming convention log-name-TYPE, * where TYPE is your log type, yoy don't need to use this array. */ $wgLogNames = [ '' => 'all-logs-page', 'block' => 'blocklogpage', 'protect' => 'protectlogpage', 'rights' => 'rightslog', 'delete' => 'dellogpage', 'upload' => 'uploadlogpage', 'move' => 'movelogpage', 'import' => 'importlogpage', 'patrol' => 'patrol-log-page', 'merge' => 'mergelog', 'suppress' => 'suppressionlog', ]; /** * Lists the message key string for descriptive text to be shown at the * top of each log type. * * Extensions with custom log types may add to this array. * * @since 1.19, if you follow the naming convention log-description-TYPE, * where TYPE is your log type, yoy don't need to use this array. */ $wgLogHeaders = [ '' => 'alllogstext', 'block' => 'blocklogtext', 'delete' => 'dellogpagetext', 'import' => 'importlogpagetext', 'merge' => 'mergelogpagetext', 'move' => 'movelogpagetext', 'patrol' => 'patrol-log-header', 'protect' => 'protectlogtext', 'rights' => 'rightslogtext', 'suppress' => 'suppressionlogtext', 'upload' => 'uploadlogpagetext', ]; /** * Lists the message key string for formatting individual events of each * type and action when listed in the logs. * * Extensions with custom log types may add to this array. */ $wgLogActions = []; /** * The same as above, but here values are names of classes, * not messages. * @see LogPage::actionText * @see LogFormatter */ $wgLogActionsHandlers = [ 'block/block' => BlockLogFormatter::class, 'block/reblock' => BlockLogFormatter::class, 'block/unblock' => BlockLogFormatter::class, 'contentmodel/change' => ContentModelLogFormatter::class, 'contentmodel/new' => ContentModelLogFormatter::class, 'delete/delete' => DeleteLogFormatter::class, 'delete/delete_redir' => DeleteLogFormatter::class, 'delete/event' => DeleteLogFormatter::class, 'delete/restore' => DeleteLogFormatter::class, 'delete/revision' => DeleteLogFormatter::class, 'import/interwiki' => ImportLogFormatter::class, 'import/upload' => ImportLogFormatter::class, 'managetags/activate' => LogFormatter::class, 'managetags/create' => LogFormatter::class, 'managetags/deactivate' => LogFormatter::class, 'managetags/delete' => LogFormatter::class, 'merge/merge' => MergeLogFormatter::class, 'move/move' => MoveLogFormatter::class, 'move/move_redir' => MoveLogFormatter::class, 'patrol/patrol' => PatrolLogFormatter::class, 'patrol/autopatrol' => PatrolLogFormatter::class, 'protect/modify' => ProtectLogFormatter::class, 'protect/move_prot' => ProtectLogFormatter::class, 'protect/protect' => ProtectLogFormatter::class, 'protect/unprotect' => ProtectLogFormatter::class, 'rights/autopromote' => RightsLogFormatter::class, 'rights/rights' => RightsLogFormatter::class, 'suppress/block' => BlockLogFormatter::class, 'suppress/delete' => DeleteLogFormatter::class, 'suppress/event' => DeleteLogFormatter::class, 'suppress/reblock' => BlockLogFormatter::class, 'suppress/revision' => DeleteLogFormatter::class, 'tag/update' => TagLogFormatter::class, 'upload/overwrite' => UploadLogFormatter::class, 'upload/revert' => UploadLogFormatter::class, 'upload/upload' => UploadLogFormatter::class, ]; /** * List of log types that can be filtered by action types * * To each action is associated the list of log_action * subtypes to search for, usually one, but not necessarily so * Extensions may append to this array * @since 1.27 */ $wgActionFilteredLogs = [ 'block' => [ 'block' => [ 'block' ], 'reblock' => [ 'reblock' ], 'unblock' => [ 'unblock' ], ], 'contentmodel' => [ 'change' => [ 'change' ], 'new' => [ 'new' ], ], 'delete' => [ 'delete' => [ 'delete' ], 'delete_redir' => [ 'delete_redir' ], 'restore' => [ 'restore' ], 'event' => [ 'event' ], 'revision' => [ 'revision' ], ], 'import' => [ 'interwiki' => [ 'interwiki' ], 'upload' => [ 'upload' ], ], 'managetags' => [ 'create' => [ 'create' ], 'delete' => [ 'delete' ], 'activate' => [ 'activate' ], 'deactivate' => [ 'deactivate' ], ], 'move' => [ 'move' => [ 'move' ], 'move_redir' => [ 'move_redir' ], ], 'newusers' => [ 'create' => [ 'create', 'newusers' ], 'create2' => [ 'create2' ], 'autocreate' => [ 'autocreate' ], 'byemail' => [ 'byemail' ], ], 'protect' => [ 'protect' => [ 'protect' ], 'modify' => [ 'modify' ], 'unprotect' => [ 'unprotect' ], 'move_prot' => [ 'move_prot' ], ], 'rights' => [ 'rights' => [ 'rights' ], 'autopromote' => [ 'autopromote' ], ], 'suppress' => [ 'event' => [ 'event' ], 'revision' => [ 'revision' ], 'delete' => [ 'delete' ], 'block' => [ 'block' ], 'reblock' => [ 'reblock' ], ], 'upload' => [ 'upload' => [ 'upload' ], 'overwrite' => [ 'overwrite' ], 'revert' => [ 'revert' ], ], ]; /** * Maintain a log of newusers at Special:Log/newusers? */ $wgNewUserLog = true; /** * Maintain a log of page creations at Special:Log/create? * @since 1.32 */ $wgPageCreationLog = true; /** @} */ # end logging } /*************************************************************************//** * @name Special pages (general and miscellaneous) * @{ */ /** * Allow special page inclusions such as {{Special:Allpages}} */ $wgAllowSpecialInclusion = true; /** * Set this to an array of special page names to prevent * maintenance/updateSpecialPages.php from updating those pages. * Mapping each special page name to an run mode like 'periodical' if a cronjob is set up. */ $wgDisableQueryPageUpdate = false; /** * On Special:Unusedimages, consider images "used", if they are put * into a category. Default (false) is not to count those as used. */ $wgCountCategorizedImagesAsUsed = false; /** * Maximum number of links to a redirect page listed on * Special:Whatlinkshere/RedirectDestination */ $wgMaxRedirectLinksRetrieved = 500; /** @} */ # end special pages } /*************************************************************************//** * @name Actions * @{ */ /** * Array of allowed values for the "title=foo&action=" parameter. Syntax is: * 'foo' => 'ClassName' Load the specified class which subclasses Action * 'foo' => true Load the class FooAction which subclasses Action * If something is specified in the getActionOverrides() * of the relevant Page object it will be used * instead of the default class. * 'foo' => false The action is disabled; show an error message * Unsetting core actions will probably cause things to complain loudly. */ $wgActions = [ 'credits' => true, 'delete' => true, 'edit' => true, 'editchangetags' => SpecialPageAction::class, 'history' => true, 'info' => true, 'markpatrolled' => true, 'mcrundo' => McrUndoAction::class, 'mcrrestore' => McrRestoreAction::class, 'protect' => true, 'purge' => true, 'raw' => true, 'render' => true, 'revert' => true, 'revisiondelete' => SpecialPageAction::class, 'rollback' => true, 'submit' => true, 'unprotect' => true, 'unwatch' => true, 'view' => true, 'watch' => true, ]; /** @} */ # end actions } /*************************************************************************//** * @name Robot (search engine crawler) policy * See also $wgNoFollowLinks. * @{ */ /** * Default robot policy. The default policy is to encourage indexing and fol- * lowing of links. It may be overridden on a per-namespace and/or per-page * basis. */ $wgDefaultRobotPolicy = 'index,follow'; /** * Robot policies per namespaces. The default policy is given above, the array * is made of namespace constants as defined in includes/Defines.php. You can- * not specify a different default policy for NS_SPECIAL: it is always noindex, * nofollow. This is because a number of special pages (e.g., ListPages) have * many permutations of options that display the same data under redundant * URLs, so search engine spiders risk getting lost in a maze of twisty special * pages, all alike, and never reaching your actual content. * * @par Example: * @code * $wgNamespaceRobotPolicies = [ NS_TALK => 'noindex' ]; * @endcode */ $wgNamespaceRobotPolicies = []; /** * Robot policies per article. These override the per-namespace robot policies. * Must be in the form of an array where the key part is a properly canonicalised * text form title and the value is a robot policy. * * @par Example: * @code * $wgArticleRobotPolicies = [ * 'Main Page' => 'noindex,follow', * 'User:Bob' => 'index,follow', * ]; * @endcode * * @par Example that DOES NOT WORK because the names are not canonical text * forms: * @code * $wgArticleRobotPolicies = [ * # Underscore, not space! * 'Main_Page' => 'noindex,follow', * # "Project", not the actual project name! * 'Project:X' => 'index,follow', * # Needs to be "Abc", not "abc" (unless $wgCapitalLinks is false for that namespace)! * 'abc' => 'noindex,nofollow' * ]; * @endcode */ $wgArticleRobotPolicies = []; /** * An array of namespace keys in which the __INDEX__/__NOINDEX__ magic words * will not function, so users can't decide whether pages in that namespace are * indexed by search engines. If set to null, default to $wgContentNamespaces. * * @par Example: * @code * $wgExemptFromUserRobotsControl = [ NS_MAIN, NS_TALK, NS_PROJECT ]; * @endcode */ $wgExemptFromUserRobotsControl = null; /** @} */ # End robot policy } /************************************************************************//** * @name AJAX, Action API and REST API * Note: The AJAX entry point which this section refers to is gradually being * replaced by the Action API entry point, api.php. They are essentially * equivalent. Both of them are used for dynamic client-side features, via XHR. * @{ */ /** * WARNING: SECURITY THREAT - debug use only * * Disables many security checks in the API for debugging purposes. * This flag should never be used on the production servers, as it introduces * a number of potential security holes. Even when enabled, the validation * will still be performed, but instead of failing, API will return a warning. * Also, there will always be a warning notifying that this flag is set. * At this point, the flag allows GET requests to go through for modules * requiring POST. * * @since 1.21 */ $wgDebugAPI = false; /** * API module extensions. * * Associative array mapping module name to modules specs; * Each module spec is an associative array containing at least * the 'class' key for the module's class, and optionally a * 'factory' key for the factory function to use for the module. * * That factory function will be called with two parameters, * the parent module (an instance of ApiBase, usually ApiMain) * and the name the module was registered under. The return * value must be an instance of the class given in the 'class' * field. * * For backward compatibility, the module spec may also be a * simple string containing the module's class name. In that * case, the class' constructor will be called with the parent * module and module name as parameters, as described above. * * Examples for registering API modules: * * @code * $wgAPIModules['foo'] = 'ApiFoo'; * $wgAPIModules['bar'] = [ * 'class' => ApiBar::class, * 'factory' => function( $main, $name ) { ... } * ]; * $wgAPIModules['xyzzy'] = [ * 'class' => ApiXyzzy::class, * 'factory' => [ XyzzyFactory::class, 'newApiModule' ] * ]; * @endcode * * Extension modules may override the core modules. * See ApiMain::$Modules for a list of the core modules. */ $wgAPIModules = []; /** * API format module extensions. * Associative array mapping format module name to module specs (see $wgAPIModules). * Extension modules may override the core modules. * * See ApiMain::$Formats for a list of the core format modules. */ $wgAPIFormatModules = []; /** * API Query meta module extensions. * Associative array mapping meta module name to module specs (see $wgAPIModules). * Extension modules may override the core modules. * * See ApiQuery::$QueryMetaModules for a list of the core meta modules. */ $wgAPIMetaModules = []; /** * API Query prop module extensions. * Associative array mapping prop module name to module specs (see $wgAPIModules). * Extension modules may override the core modules. * * See ApiQuery::$QueryPropModules for a list of the core prop modules. */ $wgAPIPropModules = []; /** * API Query list module extensions. * Associative array mapping list module name to module specs (see $wgAPIModules). * Extension modules may override the core modules. * * See ApiQuery::$QueryListModules for a list of the core list modules. */ $wgAPIListModules = []; /** * Maximum amount of rows to scan in a DB query in the API * The default value is generally fine */ $wgAPIMaxDBRows = 5000; /** * The maximum size (in bytes) of an API result. * @warning Do not set this lower than $wgMaxArticleSize*1024 */ $wgAPIMaxResultSize = 8388608; /** * The maximum number of uncached diffs that can be retrieved in one API * request. Set this to 0 to disable API diffs altogether */ $wgAPIMaxUncachedDiffs = 1; /** * Maximum amount of DB lag on a majority of DB replica DBs to tolerate * before forcing bots to retry any write requests via API errors. * This should be lower than the 'max lag' value in $wgLBFactoryConf. */ $wgAPIMaxLagThreshold = 7; /** * Log file or URL (TCP or UDP) to log API requests to, or false to disable * API request logging */ $wgAPIRequestLog = false; /** * Set the timeout for the API help text cache. If set to 0, caching disabled */ $wgAPICacheHelpTimeout = 60 * 60; /** * The ApiQueryQueryPages module should skip pages that are redundant to true * API queries. */ $wgAPIUselessQueryPages = [ 'MIMEsearch', // aiprop=mime 'LinkSearch', // list=exturlusage 'FileDuplicateSearch', // prop=duplicatefiles ]; /** * Enable AJAX framework * * @deprecated (officially) since MediaWiki 1.31 and ignored since 1.32 */ $wgUseAjax = true; /** * List of Ajax-callable functions. * Extensions acting as Ajax callbacks must register here * @deprecated (officially) since 1.27; use the API instead */ $wgAjaxExportList = []; /** * Enable AJAX check for file overwrite, pre-upload */ $wgAjaxUploadDestCheck = true; /** * Enable previewing licences via AJAX. */ $wgAjaxLicensePreview = true; /** * Have clients send edits to be prepared when filling in edit summaries. * This gives the server a head start on the expensive parsing operation. */ $wgAjaxEditStash = true; /** * Settings for incoming cross-site AJAX requests: * Newer browsers support cross-site AJAX when the target resource allows requests * from the origin domain by the Access-Control-Allow-Origin header. * This is currently only used by the API (requests to api.php) * $wgCrossSiteAJAXdomains can be set using a wildcard syntax: * * - '*' matches any number of characters * - '?' matches any 1 character * * @par Example: * @code * $wgCrossSiteAJAXdomains = [ * 'www.mediawiki.org', * '*.wikipedia.org', * '*.wikimedia.org', * '*.wiktionary.org', * ]; * @endcode */ $wgCrossSiteAJAXdomains = []; /** * Domains that should not be allowed to make AJAX requests, * even if they match one of the domains allowed by $wgCrossSiteAJAXdomains * Uses the same syntax as $wgCrossSiteAJAXdomains */ $wgCrossSiteAJAXdomainExceptions = []; /** * List of allowed headers for cross-origin API requests. */ $wgAllowedCorsHeaders = [ /* simple headers (see spec) */ 'Accept', 'Accept-Language', 'Content-Language', 'Content-Type', /* non-authorable headers in XHR, which are however requested by some UAs */ 'Accept-Encoding', 'DNT', 'Origin', /* MediaWiki whitelist */ 'User-Agent', 'Api-User-Agent', ]; /** * Enable the experimental REST API. * * @deprecated Since 1.35, defaults to true and is ignored by MediaWiki core itself. * No longer functions as a setting. Will be removed in 1.36. */ $wgEnableRestAPI = true; /** * Additional REST API Route files. * * A common usage is to enable development/experimental endpoints only on test wikis. */ $wgRestAPIAdditionalRouteFiles = []; /** @} */ # End AJAX and API } /************************************************************************//** * @name Shell and process control * @{ */ /** * Maximum amount of virtual memory available to shell processes under linux, in KB. */ $wgMaxShellMemory = 307200; /** * Maximum file size created by shell processes under linux, in KB * ImageMagick convert for example can be fairly hungry for scratch space */ $wgMaxShellFileSize = 102400; /** * Maximum CPU time in seconds for shell processes under Linux */ $wgMaxShellTime = 180; /** * Maximum wall clock time (i.e. real time, of the kind the clock on the wall * would measure) in seconds for shell processes under Linux */ $wgMaxShellWallClockTime = 180; /** * Under Linux: a cgroup directory used to constrain memory usage of shell * commands. The directory must be writable by the user which runs MediaWiki. * * If specified, this is used instead of ulimit, which is inaccurate, and * causes malloc() to return NULL, which exposes bugs in C applications, making * them segfault or deadlock. * * A wrapper script will create a cgroup for each shell command that runs, as * a subgroup of the specified cgroup. If the memory limit is exceeded, the * kernel will send a SIGKILL signal to a process in the subgroup. * * @par Example: * @code * mkdir -p /sys/fs/cgroup/memory/mediawiki * mkdir -m 0777 /sys/fs/cgroup/memory/mediawiki/job * echo '$wgShellCgroup = "/sys/fs/cgroup/memory/mediawiki/job";' >> LocalSettings.php * @endcode * * The reliability of cgroup cleanup can be improved by installing a * notify_on_release script in the root cgroup, see e.g. * https://gerrit.wikimedia.org/r/#/c/40784 */ $wgShellCgroup = false; /** * Executable path of the PHP cli binary. Should be set up on install. */ $wgPhpCli = '/usr/bin/php'; /** * Locale for LC_ALL, to provide a known environment for locale-sensitive operations * * For Unix-like operating systems, this should be set to C.UTF-8 or an * equivalent to provide the most consistent behavior for locale-sensitive * C library operations across different-language wikis. If that locale is not * available, use another locale that has a UTF-8 character set. * * This setting mainly affects the behavior of C library functions, including: * - String collation (order when sorting using locale-sensitive comparison) * - For example, whether "Å" and "A" are considered to be the same letter or * different letters and if different whether it comes after "A" or after * "Z", and whether sorting is case sensitive. * - String character set (how characters beyond basic ASCII are represented) * - We need this to be a UTF-8 character set to work around * https://bugs.php.net/bug.php?id=45132 * - Language used for low-level error messages. * - Formatting of date/time and numeric values (e.g. '.' versus ',' as the * decimal separator) * * MediaWiki provides its own methods and classes to perform many * locale-sensitive operations, which are designed to be able to vary locale * based on wiki language or user preference: * - MediaWiki's Collation class should generally be used instead of the C * library collation functions when locale-sensitive sorting is needed. * - MediaWiki's Message class should be used for localization of messages * displayed to the user. * - MediaWiki's Language class should be used for formatting numeric and * date/time values. * * @note If multiple wikis are being served from the same process (e.g. the * same fastCGI or Apache server), this setting must be the same on all those * wikis. */ $wgShellLocale = 'C.UTF-8'; /** * Method to use to restrict shell commands * * Supported options: * - 'autodetect': Autodetect if any restriction methods are available * - 'firejail': Use firejail * - false: Don't use any restrictions * * @note If using firejail with MediaWiki running in a home directory different * from the webserver user, firejail 0.9.44+ is required. * * @since 1.31 * @var string|bool */ $wgShellRestrictionMethod = 'autodetect'; /** @} */ # End shell } /************************************************************************//** * @name HTTP client * @{ */ /** * Timeout for HTTP requests done internally, in seconds. * * @since 1.5 * @var float|int */ $wgHTTPTimeout = 25; /** * Timeout for connections done internally (in seconds). * * Only supported if cURL is installed, ignored otherwise. * * @since 1.22 * @var float|int */ $wgHTTPConnectTimeout = 5.0; /** * The maximum HTTP request timeout in seconds. If any specified or configured * request timeout is larger than this, then this value will be used instead. * * @since 1.35 * @var float|int */ $wgHTTPMaxTimeout = INF; /** * The maximum HTTP connect timeout in seconds. If any specified or configured * connect timeout is larger than this, then this value will be used instead. * * @since 1.35 * @var float|int */ $wgHTTPMaxConnectTimeout = INF; /** * Timeout for HTTP requests done internally for transwiki imports, in seconds. * @since 1.29 */ $wgHTTPImportTimeout = 25; /** * Timeout for Asynchronous (background) HTTP requests, in seconds. */ $wgAsyncHTTPTimeout = 25; /** * Proxy to use for CURL requests. */ $wgHTTPProxy = ''; /** * Local virtual hosts. * * This lists domains that are configured as virtual hosts on the same machine. * * This affects the following: * - MWHttpRequest: If a request is to be made to a domain listed here, or any * subdomain thereof, then no proxy will be used. * Command-line scripts are not affected by this setting and will always use * the proxy if it is configured. * * @since 1.25 */ $wgLocalVirtualHosts = []; /** * Whether to respect/honour the request ID provided by the incoming request * via the `X-Request-Id` header. Set to `true` if the entity sitting in front * of Mediawiki sanitises external requests. Default: `false`. */ $wgAllowExternalReqID = false; /** @} */ # End HTTP client } /************************************************************************//** * @name Job queue * @{ */ /** * Number of jobs to perform per request. May be less than one in which case * jobs are performed probabalistically. If this is zero, jobs will not be done * during ordinary apache requests. In this case, maintenance/runJobs.php should * be run periodically. */ $wgJobRunRate = 1; /** * When $wgJobRunRate > 0, try to run jobs asynchronously, spawning a new process * to handle the job execution, instead of blocking the request until the job * execution finishes. * * @since 1.23 */ $wgRunJobsAsync = false; /** * Number of rows to update per job */ $wgUpdateRowsPerJob = 300; /** * Number of rows to update per query */ $wgUpdateRowsPerQuery = 100; /** @} */ # End job queue } /************************************************************************//** * @name Miscellaneous * @{ */ /** * Specify the difference engine to use. * * Supported values: * - 'external': Use an external diff engine, which must be specified via $wgExternalDiffEngine * - 'wikidiff2': Use the wikidiff2 PHP extension * - 'php': PHP implementations included in MediaWiki * * The default (null) is to use the first engine that's available. * * @since 1.35 * @var string|null */ $wgDiffEngine = null; /** * Name of the external diff engine to use. * @var string|false Path to an external diff executable */ $wgExternalDiffEngine = false; /** * Disable redirects to special pages and interwiki redirects, which use a 302 * and have no "redirected from" link. * * @note This is only for articles with #REDIRECT in them. URL's containing a * local interwiki prefix (or a non-canonical special page name) are still hard * redirected regardless of this setting. */ $wgDisableHardRedirects = false; /** * LinkHolderArray batch size * For debugging */ $wgLinkHolderBatchSize = 1000; /** * By default MediaWiki does not register links pointing to same server in * externallinks dataset, use this value to override: */ $wgRegisterInternalExternals = false; /** * Maximum number of pages to move at once when moving subpages with a page. */ $wgMaximumMovedPages = 100; /** * Fix double redirects after a page move. * Tends to conflict with page move vandalism, use only on a private wiki. */ $wgFixDoubleRedirects = false; /** * Allow redirection to another page when a user logs in. * To enable, set to a string like 'Main Page' */ $wgRedirectOnLogin = null; /** * Configuration for processing pool control, for use in high-traffic wikis. * An implementation is provided in the PoolCounter extension. * * This configuration array maps pool types to an associative array. The only * defined key in the associative array is "class", which gives the class name. * The remaining elements are passed through to the class as constructor * parameters. * * @par Example using local redis instance: * @code * $wgPoolCounterConf = [ 'ArticleView' => [ * 'class' => PoolCounterRedis::class, * 'timeout' => 15, // wait timeout in seconds * 'workers' => 1, // maximum number of active threads in each pool * 'maxqueue' => 5, // maximum number of total threads in each pool * 'servers' => [ '127.0.0.1' ], * 'redisConfig' => [] * ] ]; * @endcode * * @par Example using C daemon from https://www.mediawiki.org/wiki/Extension:PoolCounter: * @code * $wgPoolCounterConf = [ 'ArticleView' => [ * 'class' => PoolCounter_Client::class, * 'timeout' => 15, // wait timeout in seconds * 'workers' => 5, // maximum number of active threads in each pool * 'maxqueue' => 50, // maximum number of total threads in each pool * ... any extension-specific options... * ] ]; * @endcode */ $wgPoolCounterConf = null; /** * To disable file delete/restore temporarily */ $wgUploadMaintenance = false; /** * Associative array mapping namespace IDs to the name of the content model pages in that namespace * should have by default (use the CONTENT_MODEL_XXX constants). If no special content type is * defined for a given namespace, pages in that namespace will use the CONTENT_MODEL_WIKITEXT * (except for the special case of JS and CS pages). * * @note To determine the default model for a new page's main slot, or any slot in general, * use SlotRoleHandler::getDefaultModel() together with SlotRoleRegistry::getRoleHandler(). * * @since 1.21 */ $wgNamespaceContentModels = []; /** * How to react if a plain text version of a non-text Content object is requested using * ContentHandler::getContentText(): * * * 'ignore': return null * * 'fail': throw an MWException * * 'serialize': serialize to default format * * @since 1.21 */ $wgContentHandlerTextFallback = 'ignore'; /** * Determines which types of text are parsed as wikitext. This does not imply that these kinds * of texts are also rendered as wikitext, it only means that links, magic words, etc will have * the effect on the database they would have on a wikitext page. * * @todo On the long run, it would be nice to put categories etc into a separate structure, * or at least parse only the contents of comments in the scripts. * * @since 1.21 */ $wgTextModelsToParse = [ CONTENT_MODEL_WIKITEXT, // Just for completeness, wikitext will always be parsed. CONTENT_MODEL_JAVASCRIPT, // Make categories etc work, people put them into comments. CONTENT_MODEL_CSS, // Make categories etc work, people put them into comments. ]; /** * Register handlers for specific types of sites. * * @since 1.21 */ $wgSiteTypes = [ 'mediawiki' => MediaWikiSite::class, ]; /** * Whether the page_props table has a pp_sortkey column. Set to false in case * the respective database schema change was not applied. * @since 1.23 */ $wgPagePropsHaveSortkey = true; /** * Secret for session storage. * This should be set in LocalSettings.php, otherwise $wgSecretKey will * be used. * @since 1.27 */ $wgSessionSecret = false; /** * If for some reason you can't install the PHP OpenSSL extension, * you can set this to true to make MediaWiki work again at the cost of storing * sensitive session data insecurely. But it would be much more secure to just * install the OpenSSL extension. * @since 1.27 */ $wgSessionInsecureSecrets = false; /** * Secret for hmac-based key derivation function (fast, * cryptographically secure random numbers). * This should be set in LocalSettings.php, otherwise $wgSecretKey will * be used. * See also: $wgHKDFAlgorithm * @since 1.24 */ $wgHKDFSecret = false; /** * Algorithm for hmac-based key derivation function (fast, * cryptographically secure random numbers). * See also: $wgHKDFSecret * @since 1.24 */ $wgHKDFAlgorithm = 'sha256'; /** * Enable page language feature * Allows setting page language in database * @var bool * @since 1.24 */ $wgPageLanguageUseDB = false; /** * Global configuration variable for Virtual REST Services. * * Use the 'path' key to define automatically mounted services. The value for this * key is a map of path prefixes to service configuration. The latter is an array of: * - class : the fully qualified class name * - options : map of arguments to the class constructor * Such services will be available to handle queries under their path from the VRS * singleton, e.g. MediaWikiServices::getInstance()->getVirtualRESTServiceClient(); * * Auto-mounting example for Parsoid: * * $wgVirtualRestConfig['paths']['/parsoid/'] = [ * 'class' => ParsoidVirtualRESTService::class, * 'options' => [ * 'url' => 'http://localhost:8000', * 'prefix' => 'enwiki', * 'domain' => 'en.wikipedia.org' * ] * ]; * * Parameters for different services can also be declared inside the 'modules' value, * which is to be treated as an associative array. The parameters in 'global' will be * merged with service-specific ones. The result will then be passed to * VirtualRESTService::__construct() in the module. * * Example config for Parsoid: * * $wgVirtualRestConfig['modules']['parsoid'] = [ * 'url' => 'http://localhost:8000', * 'prefix' => 'enwiki', * 'domain' => 'en.wikipedia.org', * ]; * * @var array * @since 1.25 */ $wgVirtualRestConfig = [ 'paths' => [], 'modules' => [], 'global' => [ # Timeout in seconds 'timeout' => 360, # 'domain' is set to $wgCanonicalServer in Setup.php 'forwardCookies' => false, 'HTTPProxy' => null ] ]; /** * Controls whether zero-result search queries with suggestions should display results for * these suggestions. * * @var bool * @since 1.26 */ $wgSearchRunSuggestedQuery = true; /* * Max time (in seconds) a user-generated transaction can spend in writes. * If exceeded, the transaction is rolled back with an error instead of being committed. * * @var int|bool Disabled if false * @since 1.27 */ $wgMaxUserDBWriteDuration = false; /* * Max time (in seconds) a job-generated transaction can spend in writes. * If exceeded, the transaction is rolled back with an error instead of being committed. * * @var int|bool Disabled if false * @since 1.30 */ $wgMaxJobDBWriteDuration = false; /** * Controls Content-Security-Policy header [Experimental] * * @see https://www.w3.org/TR/CSP2/ * @since 1.32 * @var bool|array true to send default version, false to not send. * If an array, can have parameters: * 'default-src' If true or array (of additional urls) will set a default-src * directive, which limits what places things can load from. If false or not * set, will send a default-src directive allowing all sources. * 'includeCORS' If true or not set, will include urls from * $wgCrossSiteAJAXdomains as an allowed load sources. * 'unsafeFallback' Add unsafe-inline as a script source, as a fallback for * browsers that do not understand nonce-sources [default on]. * 'useNonces' Require nonces on all inline scripts. If disabled and 'unsafeFallback' * is on, then all inline scripts will be allowed [default true]. * 'script-src' Array of additional places that are allowed to have JS be loaded from. * 'object-src' Array or string of where to load objects from. unset/true means 'none'. * False means omit. (Since 1.35) * 'report-uri' true to use MW api [default], false to disable, string for alternate uri * @warning May cause slowness on windows due to slow random number generator. */ $wgCSPHeader = false; /** * Controls Content-Security-Policy-Report-Only header * * @since 1.32 * @var bool|array Same as $wgCSPHeader */ $wgCSPReportOnlyHeader = false; /** * List of messages which might contain raw HTML. * Extensions should add their insecure raw HTML messages to extension.json. * The list is used for access control: * changing messages listed here will require editsitecss and editsitejs rights. * * Message names must be given with underscores rather than spaces and with lowercase first letter. * * @since 1.32 * @var string[] */ $wgRawHtmlMessages = [ 'copyright', 'history_copyright', 'googlesearch', 'feedback-terms', 'feedback-termsofuse', ]; /** * Mapping of event channels (or channel categories) to EventRelayer configuration. * * By setting up a PubSub system (like Kafka) and enabling a corresponding EventRelayer class * that uses it, MediaWiki can broadcast events to all subscribers. Certain features like WAN * cache purging and CDN cache purging will emit events to this system. Appropriate listers can * subscribe to the channel and take actions based on the events. For example, a local daemon * can run on each CDN cache node and perform local purges based on the URL purge channel events. * * Some extensions may want to use "channel categories" so that different channels can also share * the same custom relayer instance (e.g. when it's likely to be overriden). They can use * EventRelayerGroup::getRelayer() based on the category but call notify() on various different * actual channels. One reason for this would be that some system have very different performance * vs durability needs, so one system (e.g. Kafka) may not be suitable for all uses. * * The 'default' key is for all channels (or channel categories) without an explicit entry here. * * @since 1.27 */ $wgEventRelayerConfig = [ 'default' => [ 'class' => EventRelayerNull::class, ] ]; /** * Share data about this installation with MediaWiki developers * * When set to true, MediaWiki will periodically ping https://www.mediawiki.org/ with basic * data about this MediaWiki instance. This data includes, for example, the type of system, * PHP version, and chosen database backend. The Wikimedia Foundation shares this data with * MediaWiki developers to help guide future development efforts. * * For details about what data is sent, see: https://www.mediawiki.org/wiki/Manual:$wgPingback * * @var bool * @since 1.28 */ $wgPingback = false; /** * List of urls which appear often to be triggering CSP reports * but do not appear to be caused by actual content, but by client * software inserting scripts (i.e. Ad-Ware). * List based on results from Wikimedia logs. * * @since 1.28 */ $wgCSPFalsePositiveUrls = [ 'https://3hub.co' => true, 'https://morepro.info' => true, 'https://p.ato.mx' => true, 'https://s.ato.mx' => true, 'https://adserver.adtech.de' => true, 'https://ums.adtechus.com' => true, 'https://cas.criteo.com' => true, 'https://cat.nl.eu.criteo.com' => true, 'https://atpixel.alephd.com' => true, 'https://rtb.metrigo.com' => true, 'https://d5p.de17a.com' => true, 'https://ad.lkqd.net/vpaid/vpaid.js' => true, 'https://ad.lkqd.net/vpaid/vpaid.js?fusion=1.0' => true, 'https://t.lkqd.net/t' => true, 'chrome-extension' => true, ]; /** * Shortest CIDR limits that can be checked in any individual range check * at Special:Contributions. * * @var array * @since 1.30 */ $wgRangeContributionsCIDRLimit = [ 'IPv4' => 16, 'IPv6' => 32, ]; /** * The following variables define 3 user experience levels: * * - newcomer: has not yet reached the 'learner' level * * - learner: has at least $wgLearnerEdits and has been * a member for $wgLearnerMemberSince days * but has not yet reached the 'experienced' level. * * - experienced: has at least $wgExperiencedUserEdits edits and * has been a member for $wgExperiencedUserMemberSince days. */ $wgLearnerEdits = 10; $wgLearnerMemberSince = 4; # days $wgExperiencedUserEdits = 500; $wgExperiencedUserMemberSince = 30; # days /** * Mapping of interwiki index prefixes to descriptors that * can be used to change the display of interwiki search results. * * Descriptors are appended to CSS classes of interwiki results * which using InterwikiSearchResultWidget. * * Predefined descriptors include the following words: * definition, textbook, news, quotation, book, travel, course * * @par Example: * @code * $wgInterwikiPrefixDisplayTypes = [ * 'iwprefix' => 'definition' * ]; * @endcode */ $wgInterwikiPrefixDisplayTypes = []; /** * RevisionStore table schema migration stage (content, slots, content_models & slot_roles tables). * Use the SCHEMA_COMPAT_XXX flags. Supported values: * * - SCHEMA_COMPAT_OLD * - SCHEMA_COMPAT_WRITE_BOTH | SCHEMA_COMPAT_READ_OLD * - SCHEMA_COMPAT_WRITE_BOTH | SCHEMA_COMPAT_READ_NEW * - SCHEMA_COMPAT_OLD * * Note that reading the old and new schema at the same time is not supported. * Attempting to set both read bits in $wgMultiContentRevisionSchemaMigrationStage * will result in an InvalidArgumentException. * * @see Task: https://phabricator.wikimedia.org/T174028 * @see Commit: https://gerrit.wikimedia.org/r/#/c/378724/ * * @since 1.32 * @deprecated Since 1.35, the only accepted value is is SCHEMA_COMPAT_NEW. * No longer functions as a setting. Will be removed in 1.36. * @var int An appropriate combination of SCHEMA_COMPAT_XXX flags. */ $wgMultiContentRevisionSchemaMigrationStage = SCHEMA_COMPAT_NEW; /** * The schema to use per default when generating XML dumps. This allows sites to control * explicitly when to make breaking changes to their export and dump format. */ $wgXmlDumpSchemaVersion = XML_DUMP_SCHEMA_VERSION_11; /** * Origin Trials tokens. * * @since 1.33 * @var array */ $wgOriginTrials = []; /** * Enable client-side Priority Hints. * * @warning EXPERIMENTAL! * * @since 1.33 * @var bool */ $wgPriorityHints = false; /** * Ratio of requests that should get Priority Hints when the feature is enabled. * * @warning EXPERIMENTAL! * * @since 1.34 * @var float */ $wgPriorityHintsRatio = 1.0; /** * Enable Element Timing. * * @warning EXPERIMENTAL! * * @since 1.33 * @var bool */ $wgElementTiming = false; /** * Expiry of the endpoint definition for the Reporting API. * * @warning EXPERIMENTAL! * * @since 1.34 * @var int */ $wgReportToExpiry = 86400; /** * List of endpoints for the Reporting API. * * @warning EXPERIMENTAL! * * @since 1.34 * @var array */ $wgReportToEndpoints = []; /** * List of Feature Policy Reporting types to enable. * Each entry is turned into a Feature-Policy-Report-Only header. * * @warning EXPERIMENTAL! * * @since 1.34 * @var array */ $wgFeaturePolicyReportOnly = []; /** * Options for Special:Search completion widget form created by SearchFormWidget class. * Settings that can be used: * - showDescriptions: true/false - whether to show opensearch description results * - performSearchOnClick: true/false - whether to perform search on click * See also TitleWidget.js UI widget. * @since 1.34 * @var array */ $wgSpecialSearchFormOptions = []; /** * Set true to allow logged-in users to set a preference whether or not matches in * search results should force redirection to that page. If false, the preference is * not exposed and cannot be altered from site default. To change your site's default * preference, set via $wgDefaultUserOptions['search-match-redirect']. * * @since 1.35 * @var bool */ $wgSearchMatchRedirectPreference = false; /** * Toggles native image lazy loading, via the "loading" attribute. * * @warning EXPERIMENTAL! * * @since 1.34 * @var array */ $wgNativeImageLazyLoading = false; /** * Option to whether serve the main page as the domain root * * @warning EXPERIMENTAL! * * @since 1.34 * @var bool */ $wgMainPageIsDomainRoot = false; /** * Whether to enable the watchlist expiry feature. * * DISCLAIMER: Enabling in production is discouraged for the time being. * A future MW 1.35 release will advertise this feature once it is stable. * * @warning EXPERIMENTAL * @since 1.35 * @var bool */ $wgWatchlistExpiry = false; /** * Chance of expired watchlist items being purged on any page edit. * * Only has effect if $wgWatchlistExpiry is true. * * If this is zero, expired watchlist items will not be removed * and the purgeExpiredWatchlistItems.php maintenance script should be run periodically. * * @since 1.35 * @var float */ $wgWatchlistPurgeRate = 0.1; /** * Relative maximum duration for watchlist expiries, as accepted by strtotime(). * This relates to finite watchlist expiries only. Pages can be watched indefinitely * regardless of what this is set to. * * This is used to ensure the watchlist_expiry table doesn't grow to be too big. * * Only has effect if $wgWatchlistExpiry is true. * * Set to null to allow expiries of any duration. * * @since 1.35 * @var string|null */ $wgWatchlistExpiryMaxDuration = '6 months'; /** * For really cool vim folding this needs to be at the end: * vim: foldmarker=@{,@} foldmethod=marker * @} */