site.ini [HTMLForms] #

The block [HTMLForms] of settings/site.ini, with 2 setting(s).

Never edit settings/site.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/site.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/site.ini.append.php for one siteaccess,
• extension/<extension>/settings/site.ini.append.php in an extension (read when the extension is active).

Secret #

Settings dealing with HTML forms and security aspects of it. #

Setting to specify a secret for the csrf protection, it
is highly recommended that you specify this pr project.

Default: ThisTokenIsNotSoSecretChangeIt.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[HTMLForms]
Secret=ThisTokenIsNotSoSecretChangeIt
*/ ?>

RefusalLogCollapseSeconds #

A POST without its form token, or with a wrong one, is answered with a 403
and one line in var/log/warning.log. The same refusal again (same check,
siteaccess, path and client) within this many seconds is counted instead of
written; the next line for it gives the count. 0 writes every one.

Default: 60.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[HTMLForms]
RefusalLogCollapseSeconds=60
*/ ?>

Related #

• All blocks of site.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/site.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.