| Name |
description |
locations |
auth_token_access
Token access |
With the presentation of a token, allow access to the content with elevated rights. The primary use of this authentication method is to grant temporary access to content to an external service. |
security/4 |
auth_token_access_maxtimeout
Token access default timeout |
The default duration for which the generated tokens will be valid. |
security/4 |
auth_token_access_maxhits
Token access default maximum hits |
The default maximum number of times a token can be used before it expires. |
security/4 |
auth_token_preserve_tempusers
Do not delete temporary users when token is deleted/expired |
Normally temporary users created (see tiki-adminusers.php) are deleted when their access token is deleted/expired. If turned on, this will keep those users around (and can be manually deleted later) but they will have no groups and therefore no perms |
security/4 |
auth_api_tokens
API access |
Enable access to Tiki API via definition of API tokens. |
security/9 |
auth_webhooks
Webhook access |
Enable Tiki to receive webhook requests from 3rd parties. |
security/10 |
bruteforce_protection
Brute Force Protection |
Enable or disable brute force protection |
security/11 |
bruteforce_initial_delay
Initial delay (seconds) |
Initial delay in seconds before allowing another attempt |
security/11 |
bruteforce_growth_rate
Growth rate (%) |
Growth rate as a percentage for delay increment |
security/11 |
bruteforce_forget_time
Forget attempts after (minutes) |
Time in minutes after which to forget previous attempts |
security/11 |
feature_htmlpurifier_output
Output should be HTML purified |
This activates HTML Purifier on wiki content and other outputs, to filter out potential security problems like XSS code. Keep in mind that HTML Purifier is not HTML5 compatible and may rewrite HTML5 syntax, producing unwanted results. |
security/1 |
feature_quick_object_perms
Quick permission assignment |
Quickperms are an interface in addition to the normal edit-permissions page, for quick assignment of permissions for a page or other object. |
security/1 |
feature_user_encryption
User encryption |
Tiki user encryption enables a personal, secure storage of sensitive data, e.g. password. Only the user can see the data. No decryption passwords are stored. |
security/1 |
feature_password_domains
Password domains |
Securely store extra user passwords and other user specific data for other "domains", or just for yourself |
security/1 |
feature_debug_console
Debugger console |
A popup console with a list of all PHP and Smarty variables used to render the current webpage. It can be viewed by clicking 'Quick Administration->Smarty debug window' or by appending ?show_smarty_debug=1 or &show_smarty_debug=1 to the page URL. You may also execute SQL, watch vars and perform a number of other functions. |
security/1, features/3 |
feature_ticketlib
Require confirmation of an action if a possible CSRF is detected |
|
security/1 |
feature_wiki_protect_email
Protect email against spam |
Protect email against spam submissions. |
security/2 |
http_header_frame_options
HTTP header x-frame options |
The x-frame-options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a , | |