Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/matomo-org/matomo.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/config
diff options
context:
space:
mode:
authorStefan Giehl <stefan@piwik.org>2017-03-18 00:10:21 +0300
committerGitHub <noreply@github.com>2017-03-18 00:10:21 +0300
commit08d24b640509e20e99722e0e32fc939788512bbb (patch)
tree479709b1eb33cadd648a0935837fa7037474e812 /config
parent13db4c0c91292a2981e633060a49efe2a38bdb1c (diff)
Introduces new config setting to enabled plugin upload (#11445)
* introduces new config setting to enabled plugin upload (disabled by default) * updates changelog * updates expected screenshot * improve message
Diffstat (limited to 'config')
-rw-r--r--config/global.ini.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/config/global.ini.php b/config/global.ini.php
index af3eb6f7b8..1dc2dda825 100644
--- a/config/global.ini.php
+++ b/config/global.ini.php
@@ -539,6 +539,10 @@ enable_load_data_infile = 1
; - links to Uninstall themes will be disabled (but user can still enable/disable themes)
enable_plugins_admin = 1
+; By setting this option to 1, it will be possible to upload plugin archives directly in Piwik
+; Enabling this opens a remote code execution vulnarability, which yould be used by attackers gaining access to Piwik admin
+enable_plugin_upload = 0
+
; By setting this option to 0, you can prevent Super User from editing the Geolocation settings.
enable_geolocation_admin = 1