[HTMLForms]
Available before Exponential 6: the legacy kernel had it before Exponential 6; the 4.x reference had no page for it.
Summary
The group [HTMLForms] of settings/site.ini.
File
settings/site.ini; override it in settings/override/site.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| Secret | ThisTokenIsNotSoSecretChangeIt | # Settings dealing with HTML forms and security aspects of it. Setting to specify a secret for the csrf protection, it is highly recommended that you specify this pr project. |
| RefusalLogCollapseSeconds | 60 | A POST without its form token, or with a wrong one, is answered with a 403 and one line in var/log/warning.log. The same refusal again (same check, siteaccess, path and client) within this many seconds is counted instead of written; the next line for it gives the count. 0 writes every one. |
See also
Generated example: site.ini [HTMLForms]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/site.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment