initialize $wgUploadNavigationUrl as false to avoid register_globals

exploits

diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 0fe482d..f75eaac 100644 (file)
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -138,12 +138,14 @@ $wgSharedUploadDirectory = "/var/www/wiki3/images";
 $wgSharedUploadDBname = false;
 /** Cache shared metadata in memcached. Don't do this if the commons wiki is in a different memcached domain */
 $wgCacheSharedUploads = true;
+
 /**
  * Point the upload navigation link to an external URL
  * Useful if you want to use a shared repository by default
  * without disabling local uploads
+ * e.g. $wgUploadNavigationUrl = 'http://commons.wikimedia.org/wiki/Special:Upload';
 */
-# $wgUploadNavigationUrl = 'http://commons.wikimedia.org/wiki/Special:Upload';
+$wgUploadNavigationUrl = false;
 
 /** 
  * Give a path here to use thumb.php for thumbnail generation on client request, instead of