Wikka Developer Blog

Wikka has been included in the list of one-click installers available with Amahi. If you are interested in other 3rd-party installers for WikkaWiki, you can also try SimpleScripts and InstallAll.

WikkaWiki release 1.1.6.7 is now available for downloading. This version introduces no new functionality, but does address security issues raised in a recent Secunia advisory. All WikkaWiki users are encouraged to update to this latest version.

Note: The WikkaWiki devs have released 1.1.6.7 to address this advisory.

Secunia recently issued a security advisory for WikkaWiki 1.1.6.6 (the most recent release). Secunia has identified this vulnerability as “less critical.” The Wikka devs have also extensively analyzed this exploit, and have determined that (1) the exploit does exist, and (2) the exploit requires that a user with administrator rights is logged in. So long as Wikka administrators are limiting access to their wikis to a trusted subset of users, we do not believe there’s an urgent need to limit access to existing WikkaWiki installations while we prepare a security update.

We have always prided ourselves on the attention we give to making Wikka one of the most secure wiki environments available, and will be releasing 1.1.6.7 in the very near future to address the issues raised in the Secunia advisory. In the meantime, we would suggest Wikka admins continue to exercise common sense and limit administrative access to only those users whom you explicitly trust.

I recently blogged at AcademicProductivity.com on the benefits of using an invisible wiki to power one’s personal homepage. If this sounds like a shameless plug for WikkaWiki, it is. The full tutorial can be found on this page. I also created a short screencast showcasing how a wiki makes it easy to perform three simple tasks. Soundtrack courtesy of Piero Umiliani (1968). Enjoy