Run a Wiki on www.gnucash.org?

[Neil Williams]

On Thursday 18 November 2004 11:57 pm, Linas Vepstas wrote:
> > The wiki at gnomesupport.org that we've been using has chronic
> > problems.  It's down a significant portion of the time, and it's
> > just plain hard to maintain.
> >
> > So, how hard would it be to run a wiki on www.gnucash.org?  I could
> > certainly put one on cvs.gnucash.org but I think that www is more
> > appropriate.  Linas, what say you?  I know you're busy with other
> > things, but would definitely appreciate your input on this.
>
> My #1 concern is security; that enabling a Wiki will allow a system
> compromise.

I run several Wiki's, including one on a server where security is a higher 
than average priority. IMHO, the weakness of a Wiki is in being spammed, 
rather than causing the server to become insecure. Using a Wiki based in PHP 
and MySQL, it's easy to 'rollback' to previous versions which makes dealing 
with spam a simple issue of browsing the Wiki from time to time and rolling 
back changes made to advertise spam content etc. You could obviously adjust 
the PHP code to deny certain words as well.

In general, Wiki code is good enough to catch exploit attempts and can 
neutralise the danger of &#...; codes, hexadecimal references and other 
problems.

I'm certainly happier with a Wiki than with message boards written in Perl. 
I've found a Wiki no more of a problem than most other content management 
systems.

> p.s. hi after long abscense, I'm getting mail-bombed.

-- 

Neil Williams
=============
http://www.codehelp.co.uk/
http://www.dclug.org.uk/
http://www.isbn.org.uk/
http://sourceforge.net/projects/isbnsearch/

http://www.biglumber.com/x/web?qs=0x8801094A28BCB3E3
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20041119/1b4830eb/attachment.bin