Differences

This shows you the differences between two versions of the page.

--- plugin:authpdo:joomla [2019-11-24 16:20] – sancaya
+++ plugin:authpdo:joomla [2019-11-24 18:50] (current) – sancaya
@@ Line 4: / Line 4: @@
 Configuration for [[plugin:authPDO]] plugin to login to DokuWiki with existing Joomla username & password.
+----
+NOTICE: There is a plugin [[plugin:authjoomla3]] which basically does the same, employing AuthPDO functionality and getting settings automatically from Joomla installation.
+However, for security reasons setting AuthPDO can be better, because unlike authjoomla3 it doesn't access Joomla directory. So we can limit the PHP access of web sites to each other, with open_basedir. For example, using NGINX:
+  location ~ \.php$ {
+      try_files     $uri $uri/ /doku.php;
+      fastcgi_pass  unix:/run/php-fpm/php-fpm.sock;
+      fastcgi_param SCRIPT_FILENAME    $document_root$fastcgi_script_name;
+      fastcgi_param PHP_VALUE open_basedir="/usr/share/nginx/www/dokuwiki/:/tmp/";
+      include       fastcgi_params;
+  }
+So DokuWiki site would have access only to its folder (and temp folder or whatever you set there), but not to Joomla files. Also, the DokuWiki user for the database can have very limited rights too — just to read users tables information.
+----
 ===== Scenario =====