Differences

This shows you the differences between two versions of the page.

--- dokuwiki:upgrade_dokuwiki [2020/03/08 18:26] – 192.168.1.69
+++ dokuwiki:upgrade_dokuwiki [2025/04/29 13:19] (current) – [Re-enable security settings for Dokuwiki] peter
@@ Line 7: / Line 7: @@
 </code>
-This will create the **dokuwiki-backup.tar.gz** backup.
+<WRAP info>
+**NOTE:**  This will create the **dokuwiki-backup.tar.gz** backup.
+Alternatively, create a copy of the DokuWiki directory:  <code bash>
+cd /var/www
+cp -R dokuwiki dokuwiki-20250429
+</code>
+</WRAP>
 ----
@@ Line 25: / Line 34: @@
 wget http://.../dokuwiki-xxxx-xx-xx.tgz
 </code>
+<WRAP info>
+**NOTE:** The latest stable version can usually be downloaded.
+<code bash>
+cd ~
+wget https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz
+</code>
+Sometimes the stable version may be corrupt and does not extract okay.
+  * In this case try to download a specified version.
+  * Visit https://download.dokuwiki.org/archive
+  * And then get the actual version needed:  <code bash>
+wget https://download.dokuwiki.org/src/dokuwiki/dokuwiki-2024-02-06b.tgz
+</code>
+</WRAP>
 ----
@@ Line 44: / Line 73: @@
 </code>
-The quotes on cp assure that it will run as is, even if an alias is set.
+<WRAP info>
+**NOTE:**  The quotes on **cp** assure that it will run as is, even if an alias is set.
+</WRAP>
+----
+===== Set permissions for the updated files =====
+<code bash>
+cd /var/www
+chown -R www-data:www-data dokuwiki
+</code>
+----
+===== Re-enable security settings for Dokuwiki =====
+Change directory to the Dokuwiki config directory.
+<code bash>
+cd /var/www/dokuwiki/conf
+</code>
+Edit the Dokuwiki config file, and set the **useacl** option to a 1.
+<file bash /var/www/dokuwiki/conf/dokuwiki.php>
+...
+/* Authentication Settings */
+$conf['useacl']      = 1;                //Use Access Control Lists to restrict access?
+...
+</file>
+----
+===== Restart NginX =====
+<code bash>
+systemctl restart nginx.service
+</code>
 ----
@@ Line 54: / Line 124: @@
 if(function_exists('posix_geteuid')){
-    // use posix to get current uid and gid
+  // use posix to get current uid and gid
-    $uid   = posix_geteuid();
+  $uid   = posix_geteuid();
-    $usr   = posix_getpwuid($uid);
+  $usr   = posix_getpwuid($uid);
-    $user  = $usr['name'];
+  $user  = $usr['name'];
-    $gid   = posix_getegid();
+  $gid   = posix_getegid();
-    $grp   = posix_getgrgid($gid);
+  $grp   = posix_getgrgid($gid);
-    $group = $grp['name'];
+  $group = $grp['name'];
 }else{
-    // try to create a file and read it's ids
+  // try to create a file and read it's ids
-    $tmp = tempnam ('/tmp', 'check');
+  $tmp = tempnam ('/tmp', 'check');
-    $uid = fileowner($tmp);
+  $uid = fileowner($tmp);
-    $gid = filegroup($tmp);
+  $gid = filegroup($tmp);
-    // try to run ls on it
+  // try to run ls on it
-    $out = `ls -l $tmp`;
+  $out = `ls -l $tmp`;
-    $lst = explode(' ',$out);
+  $lst = explode(' ',$out);
-    $user  = $lst[2];
+  $user  = $lst[2];
-    $group = $lst[3];
+  $group = $lst[3];
-    unlink($tmp);
+  unlink($tmp);
 }
 echo "Your PHP process seems to run with the UID $uid ($user) and the GID $gid ($group)\n"; ?>
 </code>
+Here are the most commonly used values for setting permissions on directories and files.
+^directories^files^result^
+|0700|0600|read/write for owner only. Owner must be the same as the PHP process user.|
+|0770|0660|read/write for owner and group. The PHP process user needs to be in the user group|
+|0777|0666|read/write for everyone. Dangerous because everybody with access to the server may write and delete your files. Use only as a last resort on trusted machines, NOT on a cheap shared hosting server.|