| 27 | | Maintenance |
|---|
| 28 | | =========== |
|---|
| 29 | | If you have PEAR Cache, it'll be used to significantly speed up |
|---|
| 30 | | things. However, this generates cached files which have to be cleared |
|---|
| 31 | | from time to time. |
|---|
| 32 | | Uncomment the code in wp-inst/maintenance.php and make sure it's |
|---|
| 33 | | protected by IP checks or username/passwords. You should call this |
|---|
| 34 | | script at least once a day, and maybe more depending on how busy |
|---|
| 35 | | your server is. |
|---|
| | 32 | PHP |
|---|
| | 33 | === |
|---|
| | 34 | For security reasons, it's very important that PHP be configured as follows: |
|---|
| | 35 | 1. Don't display error messages to the browser. This is almost always |
|---|
| | 36 | turned off but sometimes when you're testing you turn this on and forget |
|---|
| | 37 | to reset it. |
|---|
| | 38 | 2. GLOBAL variables must be turned off. This is one of the first things |
|---|
| | 39 | any security aware admin will do. These days the default is for it to |
|---|
| | 40 | be off! |
|---|
| | 41 | |
|---|
| | 42 | The easiest way of configuring it is via the .htaccess file that is |
|---|
| | 43 | created during the install. If you haven't installed WPMU yet then edit |
|---|
| | 44 | the file htaccess.dist in this directory and add these two lines at the |
|---|
| | 45 | top: |
|---|
| | 46 | |
|---|
| | 47 | php_flag register_globals 0 |
|---|
| | 48 | php_flag display_errors 0 |
|---|
| | 49 | |
|---|
| | 50 | This is NOT included in that file by default because it doesn't work on |
|---|
| | 51 | all machines. If it doesn't work on your machine, you'll get a cryptic |
|---|
| | 52 | "500 internal error" after you install WPMU. To remove the offending lines |
|---|
| | 53 | just edit the file ".htaccess" in your install directory and you'll see |
|---|
| | 54 | them at the top. Delete and save the file again. |
|---|
| | 55 | Read here for how to enable this: http://ie.php.net/configuration.changes |
|---|
| | 56 | |
|---|
| | 57 | If you don't want to edit your .htaccess file then you need to change your |
|---|
| | 58 | php.ini. It's beyond the scope of this README to know exactly where it is |
|---|
| | 59 | on your machine, but if you're on a shared hosted server you probably |
|---|
| | 60 | don't have access to it as it requires root or administrator privileges |
|---|
| | 61 | to change. |
|---|
| | 62 | If you do have root access, try "locate php.ini" or check in: |
|---|
| | 63 | /etc/php4/apache2/php.ini |
|---|
| | 64 | /usr/local/lib/php.ini |
|---|
| | 65 | Once you have opened your php.ini, look for the sections related to |
|---|
| | 66 | register_globals and display_errors. Make sure both are Off like so: |
|---|
| | 67 | display_errors = Off |
|---|
| | 68 | register_globals = Off |
|---|
| | 69 | |
|---|
| | 70 | You'll have to restart Apache after you modify your php.ini for the |
|---|
| | 71 | settings to be updated. |
|---|
