Oct 13, 2026
Hardening MediaWiki on Shared Hosting: Protecting LocalSettings.php, Spam Controls, and Security Headers
MediaWiki ships with sensible defaults, but a default install on shared hosting still exposes configuration files, open registration, and unprotected upload directories. This guide walks through locking down LocalSettings.php, stopping spam and brute-force logins, and adding HTTP security headers using only your hosting account tools.