Re: [Phpwiki-talk] comments to SystemInfo

[Reini U. <ru...@x-...>]

la...@us... schrieb:
> Hello Reini,
> RU> Comments to this new plugin, which is not in CVS yet?
> RU>    http://phpwiki.sourceforge.net/phpwiki/SystemInfo
> RU>    http://phpwiki.sourceforge.net/demo/en/SystemInfo
> 
> RU> I invented a new plugin argument syntax, because there can be so many 
> RU> boolean args, I wanted to keep it short but still customizable, and I 
> RU> don't need any non-boolean argument, besides the seperator on multiple 
> RU> arguments used.
> 
> I  am  a little concerned about giving everyone the chance to find out
> my disk space size, and certain other things about my server. 

diskspace is `du -s PHPWIKI_DIR`, so actually only the diskspace used 
for phpwiki, which might be useful information for users who want to 
install it. database size similar.
I wouldn't call that security sensible information.

> Why, for example, should anyone need to know what version of php I am running?

This is returned by every apache header anyway.

> There may be other security implications.
> 
> However,  I  had been thinking of something similar. In particular, we
> could  use something like this to replace Info and DebugInfo. We could
> have a plugin which displays info about a particular page, eg <?plugin
> pageinfo LastModified> or <?plugin pageinfo Markup>.
> 
> It could be used, for example, do display a hit counter on any page.

<?plugin SystemInfo hitcounter ?> is a good idea. <?plugin SystemInfo 
hitstats ?> displays full statistical information, but the raw number 
alone would also be interesting.

> <?plugin  pageinfo  all>  could display the same info as, and replace,
> the current Info page.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/