Upgrade Key

Warning: This plugin has't been updated in over 6 years. It may no longer be maintained.

What you can do to help:

Prohibit non-admins from executing /upgrade.php

Last updated
Recommended Releases
Elgg Release Download Date Links
1.81.0 (2.45 kB)2012-Oct-24
Show all releases

This plugin prevents anonymous visitors from regenerating caches by executing Elgg's upgrade.php script.

  1. Enable the plugin
  2. Create an alphanumeric secret key. E.g. ABBA4ever
  3. Edit engine/settings.php and set $CONFIG->upgrade_key to your key. E.g. $CONFIG->upgrade_key = 'ABBA4ever';

Once configured, one of two conditions must be met to run upgrade.php:

  • User is logged in as an admin
  • The URL includes the secret key as key in the querystring. E.g. upgrade.php?key=ABBA4ever

Note: Your key needn't be alphanumeric, but this makes easy copy/pasting and eliminates URL encoding issues.

Steve Clay

Core Elgg team member, developer for University of Florida College of Education

Stats

  • Category: Site admin
  • License: Modified BSD license
  • Updated: 2014-11-17
  • Downloads: 666
  • Recommendations: 4

Other Projects

View Steve Clay's plugins