Movable Type 5.1 の新機能と、半日でできるMTのセキュリティ対策。

1. MTDDC Tokyo 2011

2. :
2009
twitter: goodpic
blog: www.goodpic.com

3. 5.1

4. ! "#$%&'()*&'+,-
...

5. 5.1

6. 5.1

7. 6/9 6/23
MTOS
4.292
Pro 4.37
Advanced 5.06
5.12
:http://www.movabletype.jp/

8. MT

9. ✓
✓
✓
✓

10. CGI

11. CGI
http://example.com
/cgi-bin/*.cgi /mt-static/
/*.html
CGI

12. CGI IP
DMZ
/cgi-bin/*
http://httpd.apache.org/docs/2.2/ja/mod/mod_authz_host.html

13. mt.cgi
URL
https://example.com/cgi-bin/mt/mt.cgi
notmt.cgi

14. (mt-config.cgi)
AdminScript notmt.cgi
hogehoge.cgi

15. mt.cgi Basic
mt-comments.cgi (mt-cp.cgi)
OK (mt.cgi)
/cgi-bin/mt.cgi

16. httpd.conf
<Directory "/home/example/www">
etc....
.htaccess
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /path/to/.htpasswd
<Files mt.cgi>
Require valid-user
</Files>
</Directory>
http://httpd.apache.org/docs/2.2/ja/howto/auth.html

17. Basic MT
ID
SSL SSL
ID

18. SSL
SSL

19. (mt-config.cgi)
StaticWebPath /mt-static
CSS
SSL SSL

20. (mt-config.cgi)
AdminCGIPath URL(SSL)
https://example.com/cgi-bin/mt/
CGIPath URL
http://example.com/cgi-bin/mt/
SSL

21. 1. SSL Forbidden
httpd.conf
<Directory "/home/example/www">
etc....
AuthType Basic .htaccess
AuthName "Restricted Files"
AuthUserFile /path/to/passwords
<Files mt.cgi>
Require valid-user
SSLRequireSSL
</Files>
</Directory>

22. 2. SSL
httpd.conf
<Directory "/home/example/www">
etc....
.htaccess
RewriteEngine On
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^(cgi-bin/mt.cgi)$
https://%{SERVER_NAME}/$1 [R,L]
</Directory>

23. SSL

24. RapidSSL GeoTrust, Inc
Go Daddy SSL
$20 - 40 /

25. AssetFileExtensions
DeniedAssetFileExtensions
MT 4.291 / 4.361 / 5.051 / 5.11

26. AssetFileExtensions
"gif,jpe?g,png,bmp,tiff?,mp3,ogg,aiff,wav,wma,
aac, flac,m4a,mov, avi,3gp,asf,mp4,qt,wmv,
asx,mpg,flv,mkv,ogm"
:

27. DeniedAssetFileExtensions
"ascx,asis,asp,aspx,bat,cfc,cfm,cgi,cmd,com,cpl,dll,
exe,htaccess,htm,html,inc,jhtml,js,jsb,jsp,mht,mhtml
,msi,php,php2,php3,php4,php5,phps,phtm,phtml,pif
,pl,pwml,py,reg,scr,sh,shtm,shtml,vbs,vxd"
:

28. ✓
✓
✓
✓

29. 5.2

30. Internet Explorer 9
5.13 5.14
Safari / Firefox
5.1x
Chrome

32. http://communities.movabletype.jp/
http://bugs.movabletype.org/

33. 5.1

34. + +
&
Webkit

36. | |

37. <$mt:CategoryBasename$>
URL
<$mt:CategoryLabel$>

39. demo

40. • label
• mt:TopLevelCategories • description
• mt:SubCategories • basename
• mt:TopLevelFolders • created_on
• mt:SubFolders • modified_on
• user_custom (default)
<mt:SubCategories
sort_by=”label”
sort_order=”descend”>
• ascend
• descend
New in 5.1

41. <mt:SubCategories sort_by=”label”
sort_order=”descend”>
<mt:CategoryNext>
<mt:CategoryPrevious>
</mt:SubCategories>

42. New in 5.1
<mt:Entries>
<mt:EntryPrimaryCategory>
<$mt:CategoryLabel$>
</mt:EntryPrimaryCategory>
</mt:Entries>

44. Before...
MT5.0x

46. /

49. demo

52. MT

53. New in 5.1
Ajax

54. IP
Movable Type Advanced
Movable Type Advanced

56. <mt:Entries
include_blogs=”children”>
website
Blog 1 Blog 2 Blog 3

57. <mt:Entries include_blogs=”children”
exclude_blogs=”2”>
New in 5.1
website
Blog 1 Blog 2 Blog 3

58. New in 5.1
<$mt:Include module="X" parent="1"$>
)

59. <mt:XX trim_to=”5+...” />
"N+ " trim_to="5+..."
" "
" ..."

60. Thank you !