Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 21 Aug 2014, 10:16
All times are UTC - 4
 Forum index » Taking the Puppy out for a walk » Announcements
Voldemort attacks wiki
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 2 of 5 [63 Posts]   Goto page: Previous 1, 2, 3, 4, 5 Next
Author Message
HairyWill


Joined: 26 May 2006
Posts: 2949
Location: Southampton, UK

PostPosted: Thu 05 Jul 2007, 08:33    Post subject:  

the database connection details should be wikka.config.php
_________________
Will
contribute: community website, screenshots, puplets, wiki, rss
Back to top
View user's profile Send private message 
JaDy

Joined: 04 May 2005
Posts: 157
Location: SE PA USA

PostPosted: Thu 05 Jul 2007, 09:09    Post subject:
Subject description: there is a way to undo a bad edit and prevent them
 

There is a way to undo a bad edit and prevent them.

Thanks to GuestToo for this (my re-wording):
Click the date at the bottom of the page for a list of the versions of the page and select the version desired.

The BootParms page was ruined so I reverted it to a previous version in this manner. And, to prevent unauthorized changes, I've put a list of known wiki editors in the Write ACL list box within Edit ACL. I've dont this to all my pages. Here's my current list:

BarryDavidKauler
BarryKauler
BlackAdder
CatmanDru
CrustyLobster
GuestToo
HairyWill
IanMul
JaDy
JeyRey
KethD
PuppianL

If you want to be added, please shout.

I know this is a headache to maintain but I can't think of a better way. I had done this in a previous year and for some reason (unknown, don't remember) had changed it to + (registered users) but the evil-doers got through. Evil or Very Mad Rolling Eyes

_________________
Felicitations & Facilitations, Rev. John G. Derrickson
Wrote fast. Goofs happen. Tell me.
Back to top
View user's profile Send private message Visit poster's website 
HairyWill


Joined: 26 May 2006
Posts: 2949
Location: Southampton, UK

PostPosted: Thu 05 Jul 2007, 09:40    Post subject:  

Some pages are being edited but not damaged. I presume they are checking to see if their changes are reverted or not. Is it better to leave them alone and make it look like the page is not maintained or is it better to revert them?

As to the ACL it works but its a bit like locking the library doors to stop people stealing the books. My beef with this method is that if someone asks for write access it has to be granted on a page by page basis. (or an admin facility to apply an ACL mod to all pages)

I think that a better authentication method and an easy way for an admin to roll back changes are preferable.

_________________
Will
contribute: community website, screenshots, puplets, wiki, rss
Back to top
View user's profile Send private message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Thu 05 Jul 2007, 10:28    Post subject:  

Quote:
I think that a better authentication method and an easy way for an admin to roll back changes are preferable


this is some of what is available - anything you think suitable?
http://wikkawiki.org/CodeContributions

and yes I would revert as soon as possible

JaDy that is quite a task
and sadly it is very restrictive
It is an idea though

Smile

Basically I have been changing the ACL's of any pages that get struck

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
raffy

Joined: 25 May 2005
Posts: 4762
Location: Manila

PostPosted: Thu 05 Jul 2007, 11:20    Post subject: Lobster is admin  

I did a check of the config and CrustyLobster is admin. You must have some special powers over the wiki.

(The wiki database and directory setup was handled directly by Barry.)

Am quite afraid of making database changes (other than edit entries) through phpmyadmin. Maybe deletion of entry is better left to the wiki admin (so that the scripts will be able to complete the subsequent tasks).
Back to top
View user's profile Send private message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Thu 05 Jul 2007, 11:47    Post subject:  

Hi Raffy

yes I am admin which gives me some abilities

BUT I do not have access to the SQL database (which is separate) which is the only way to delete users

I do not have access to servage directly

If you are worried about making a mistake, do a backup first

Someone seems in there now as the wiki is down

Many thanks

Smile

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
jimhap

Joined: 03 Mar 2007
Posts: 63

PostPosted: Thu 05 Jul 2007, 14:30    Post subject:  

just wondering- how come you don't use MediaWiki? Does it have more bugs or something? Question
Back to top
View user's profile Send private message Visit poster's website 
Wolf Pup

Joined: 27 Apr 2006
Posts: 637

PostPosted: Thu 05 Jul 2007, 18:31    Post subject:  

When will the wiki be available again?
_________________

Visit The Repository - Helpful and hard-to-find treats for Puppy 3.
Click Here for Puppy Support Chat, + Helpful Links.
Back to top
View user's profile Send private message 
raffy

Joined: 25 May 2005
Posts: 4762
Location: Manila

PostPosted: Thu 05 Jul 2007, 22:40    Post subject: password change  

Hmm, Barry must have changed the password, so I updated the config file. The wiki is available again.

Re: mediawiki - it is not as small and fast as wikka.
Back to top
View user's profile Send private message 
John Doe

Joined: 01 Aug 2005
Posts: 1689
Location: Michigan, US

PostPosted: Fri 06 Jul 2007, 03:55    Post subject:  

Lobster wrote:
Society for the Promotion of Elfish Welfare = spew?

Smile


i meant spew as in, "HaX0red by f3d h3AD" vs...

Lobster wrote:
...it is commercial interests.


acknowledged.

Lobster wrote:
They would probably like to be thought of as 'guerilla marketers'


read that book about 17 years ago. great read.
Back to top
View user's profile Send private message 
HairyWill


Joined: 26 May 2006
Posts: 2949
Location: Southampton, UK

PostPosted: Fri 06 Jul 2007, 04:32    Post subject:  

I can't seem to find anything there on authentication

however this looks good for rolling back changes
http://wikkawiki.org/DeleteSpamAction

If you go with the ACLs idea you can create groups. The implementation in the page below would allow you to create a page that defined the members of a group Every member of the group could be given write access to the page, so that they could add another user. If we had a second page where new users could put their names to be added to the editors group anyone already in the editors group could do it. This method does allow one editor to maliciously remove another editor from the editors group, not sure if this would be an issue.
http://wikkawiki.org/ACLsWithUserGroups

This system coupled with email notificationsfor all members of editors group for the WikkiEditors page and the MakeMeAnEditor page would allow new users to get added to the editors list in a few hours. Though every editor would receive 2 emails for each new user.
http://wikkawiki.org/NotifyOnChange

I've just realised that this system has a flaw if a spammer gets added to the editors list accidentally, they could remove all other users from the editors list. This would then require an admin to log in and fix the editors. This risk seems low and not catastophic as it can be repaired.

_________________
Will
contribute: community website, screenshots, puplets, wiki, rss
Back to top
View user's profile Send private message 
raffy

Joined: 25 May 2005
Posts: 4762
Location: Manila

PostPosted: Fri 06 Jul 2007, 05:17    Post subject: suspected spambots removed  

OK, more than a thousand suspected spambots removed - it's good that my mouse is still working after that. Smile Number of users is now down to 944 from close to 2,000.

Please PM me with the name of any more user posting spam in the wiki.

And Lobster, please be ready to hear complaints about missing user accounts, in case some people have used unusual usernames, and their accounts were deleted. Wink My apologies. Embarassed

_________________
Puppy user since Oct 2004. Want FreeOffice? Get the sfs (English only).
Back to top
View user's profile Send private message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Fri 06 Jul 2007, 05:49    Post subject:  

Very Happy Excellent. Many thanks Raffy.

Good ideas from HairyWill. Changes can now be rolled back HairyWIll

Also be aware that bots are still registering and I noticed some bots in that 944 list . . .


Very Happy

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
HairyWill


Joined: 26 May 2006
Posts: 2949
Location: Southampton, UK

PostPosted: Fri 06 Jul 2007, 06:02    Post subject:  

done
I started at the bottom of recent changes and worked forwards, not sure how to go further back than that.

There were some pages created by bots that are now empty.

The referrers for RecentChanges seems to indicate that google is still indexing it.

_________________
Will
contribute: community website, screenshots, puplets, wiki, rss
Back to top
View user's profile Send private message 
raffy

Joined: 25 May 2005
Posts: 4762
Location: Manila

PostPosted: Fri 06 Jul 2007, 09:24    Post subject: cant register  

Quote:
be aware that bots are still registering and I noticed some bots in that 944 list

Nope - not even I can register via the login/register page (I still have to study how the action scripts are accessed). And when I get it, only you (Lobster) will be able to add new users.

Help me weed out the remaining bots via PM.

_________________
Puppy user since Oct 2004. Want FreeOffice? Get the sfs (English only).
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 2 of 5 [63 Posts]   Goto page: Previous 1, 2, 3, 4, 5 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Taking the Puppy out for a walk » Announcements
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0805s ][ Queries: 12 (0.0046s) ][ GZIP on ]