Login to your MediaWiki server and navigate to its root directory # cd /var/www/html/wikiĢ. So the first step is to check if your MediaWiki has this extension as shown below:ġ. But I have installed MediaWiki version 1.25.2 which had image authorization module. It means, you need to grab this extension from the internet and copy it into the MediaWiki folder. The older versions of MediaWiki didn’t have Image authorization module by default. Warning: Before setting up Image Authorization, click on this link to understand the security issues of authorization extensions. Moreover, the image uploaded via MediaWiki is served directly by the web server. So in order to fix this issue, we have to rely on Image Authorization extension of MediaWiki. Instead, it was designed to be as open as possible. So how did I fix the issue?īefore I speak about the solution, I would like to bring to your notice that – MediaWiki is not a CMS or meant to protect any sensitive data. Well, my colleague has a point – any content (be it a page or image or document) that are stored under MediaWiki should only be accessed by authorized users. Now, the post that contains the image will be accessible only by the authorized user, but the image that was uploaded via MediaWiki can be accessed directly by typing its URL in the web browser (like, ). For example, assume that you had uploaded an image (say photo.jpg) via MediaWiki and the image has been embedded in one of the post as well. But my colleague came up with an issue, where the images and documents that are uploaded via MediaWiki was still accessible directly without logging-in. I had setup a private MediaWiki for one of my project and that allows only logged-in users to view its content or page.

Mediawiki images