X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/0a37c45f32b6a0cf92eb046deabf933fb48ac197..e3713772f76fa9cc3587e48d0326035a352270d9:/doc/plugins/attachment.mdwn diff --git a/doc/plugins/attachment.mdwn b/doc/plugins/attachment.mdwn index a03865987..524a233fa 100644 --- a/doc/plugins/attachment.mdwn +++ b/doc/plugins/attachment.mdwn @@ -1,5 +1,5 @@ -[[template id=plugin name=conditional core=1 author="[[Joey]]"]] -[[tag type/useful]] +[[!template id=plugin name=attachment core=0 author="[[Joey]]"]] +[[!tag type/useful]] This plugin allows files to be uploaded to the wiki over the web. @@ -20,24 +20,15 @@ Bear in mind that if you let anyone upload a particular kind of file contains html as a web page; including running any malicious javascript embedded in that page. -To provide a way to combat these abuses, the wiki admin can specify a -[[ikiwiki/PageSpec]] on their preferences page, to control what types of -attachments can be uploaded. The regular [[ikiwiki/PageSpec]] syntax is -expanded with additional tests. +If you enable this plugin, be sure to lock that down, by entering an +[[enhanced_PageSpec|ikiwiki/pagespec/attachment]] in the "Allowed +Attachments" field of the wiki admin's preferences page. -For example, to limit arbitrary files to 50 kilobtes, but allow -larger mp3 files to be uploaded, a test like this could be used: - - (*.mp3 and maxsize(15mb)) or (* and maxsize(50kb)) +This plugin will use the [[!cpan File::MimeInfo::Magic]] perl module, if +available, for mimetype checking. -The following additional tests are available: - -* maxsize(size) - - Tests whether the attachment is no larger than the specified size. - The size defaults to being in bytes, but "kb", "mb", "gb" etc can be - used to specify the units. - -* minsize(size) - - Tests whether the attachment is no smaller than the specified size. +The `virusfree` [[PageSpec|ikiwiki/pagespec/attachment]] requires that +ikiwiki be configured with a virus scanner program via the `virus_checker` +option in the setup file. If using `clamav`, with `clamd`, set it to +"clamdscan -". Or to use clamav without the `clamd` daemon, you +could set it to "clamscan -".