Extension:NSFileRepo/zh
 | This extension is mainly supported in an external venue: BlueSpice Community Forum. If you need help, you should post there, and not on the talk page. |
 | MediaWiki的最初目的并不是提供按页面的访问限制，并且几乎所有添加这一功能的措施或补丁都或多或少存在缺陷，这可能导致暴露机密数据。 If you require this level of control, you are strongly advised to use a content management system that supports it natively.
Patches or third-party extensions claiming to provide access control may contain security flaws, potentially exposing confidential data. Use them at your own risk. Neither the MediaWiki developers nor the Wikimedia Foundation are responsible for any data leaks that may result. This message is added to all extensions of this nature and may not reflect the actual security status of this extension. 关于更多信息，请见Security issues with authorization extensions。 |
The NSFileRepo extension restricts access to upload and read files and images to a given set of user groups associated with protected namespaces. Using this extension (within the security limitations noted above), you can protect not only pages and areas of your wiki, but also any uploaded images or files within those namespaces.
Namespaces are mechanism for grouping/separating wiki pages.
- See Help:Namespaces for more user help documentation on what they are and how they are used.
- See Manual:Namespace for system administration details on MediaWiki's namespace feature
- See Project:Namespaces for an explanation of how namespaces are used on mediawiki.org
用法
Generically, you use the same syntax as a normal file reference link, adding the namespace between the file specifier ("File", "Image" or "Media") and the file name:
[[{FILE_NS}:{Namespace}:{Filename}]]
Example (where Private is the protected namespace and Filename.jpg is the file to which you wish to limit access):
[[File:Private:Filename.jpg]]
The standard for accessing files is generally:
[[File:Filename.jpg]] [[Image:Filename.jpg]] [[Media:Filename.jpg]]
This extension allows you to protect access to files by adding the namespace text identifier after the file namespace identifier, for example (where Private is the protected namespace and Filename.jpg is the file to which you wish to limit access):
[[File:Private:Filename.jpg]] [[Image:Private:Filename.jpg]] [[Media:Private:Filename.jpg]]
It may be helpful to understand the default security model used by MediaWiki using the instructions below:
Limitations of security are the same as for Extension:Lockdown. To review these limitations, see here.
To use the full capabilities of this extension (for example, specific namespace protections) you will need to install and use the namespace protections provided through Extension:Lockdown.
This extension was made possible by the introduction of Repository Classes by Tim Starling - an elegant and brilliant implementation. It uses a new Local Repository class mechanism. Technical details on how this extension works can be found here.
安裝
- 下载，并将解压后的
NSFileRepo移动到extensions/目录中。
开发者和代码贡献人员应从Git安装扩展，输入：cd extensions/ git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/NSFileRepo
- 将下列放置在您的LocalSettings.php的底部：
wfLoadExtension( 'NSFileRepo' );
- Activate the Image authorization according to instructions found in Image authorization
- Configure at your convenience
完成 – 在您的wiki上至Special:Version，以验证已成功安装。
When working with REL1_27 and later, you will need to create a symlink of nsfr_img_auth.php within your mediawiki installation directory
On Linux use
ln -s extensions/NSFileRepo/nsfr_img_auth.php
On Windows use
mklink nsfr_img_auth.php extensions\NSFileRepo\nsfr_img_auth.php
Also make sure to set a proper value for $wgUploadPath. E.G.:
$wgUploadPath = "$wgScriptPath/nsfr_img_auth.php";
The user rights and configuration requiremements are are the same as described in Extension Lockdown.
Troubleshooting IIS / UTF-8 encoding
In some unspecified constellations you will have problems by opening files with special characters using nsfr_img_auth.php. The problem was seen by using Windows Server 2012 R2 with IIS 8.5 and PHP 7.2.14. It seems to be a problem with UTF-8 encoding.
You can use this hook as workaround to solve this:
$wgHooks['ImgAuthBeforeCheckFileExists'][] = function( &$path, &$name, &$filename ) {
$path = utf8_encode( $path );
$name = utf8_encode( $name );
$filename = utf8_encode( $filename );
return true;
};
Just put it in the LocalSettings.php and the problem should be solved.
发行说明
| Release | Changes |
|---|---|
| 1.27.0 | This major update includes changes for compatibility to MediaWiki REL1_27
|
| 1.7 | This major update includes a refactoring of the code and is the base for further development, such as a Special:Upload integration. |
| 1.6 | This major version updated the I18n to json-files. |
| 1.5 | This is a major update to incorporate several evolved changes to the core FileRepo modules into the extension and to bring the extension up to current coding and core standards. Specifically:
Should be backward compatible, but only tested with HEAD, 1.19 and 1.20 Release 1.5 is available through gerrit and is tagged as NSFileRepoREL1_05 |
| 1.4 |
|
| 1.3 | Allow files with namespace protection (e.g. File:ns:yourfile.txt) to be whitelisted using standard $wgWhitelistRead in localsettings. |
| 1.2 |
|
| 1.1 |
|
外部链接
- Extension reference: NSFileRepo
 | 此在以下wiki农场/托管网站和/或软件包中提供： 這不是一份權威名單。 即使某些wiki农场/托管网站和/或软件包未在这里列出，它们也可能提供此。 请检查你的wiki农场/托管网站或软件包以确认提供情况。 |