Puppy Linux Discussion Forum

Lobster · Posted: Sun 22 Jul 2007, 09:50 Post_subject: Wiki wacked

Just reverted "UsabilityIssues"

Wiki under attack . . . Death Eaters, spammers, unregistered users suspected . . . Evil or Very Mad

Protect the women and muggles Shocked

http://puppylinux.org/wikka/RecentChanges

Rolling Eyes

raffy · Joined: 25 May 2005 Posts: 4639 Location: Manila

Lobster, can you set the access so that only registered users can post in the wiki? (if not, then I have to do it in the config file.)

Lobster · Posted: Mon 23 Jul 2007, 05:30 Post_subject:

No

I have limited powers (and no cape)
You will have to set it raffy if possible Smile

The problem is the wiki attacks are getting more frequent (they used to be about once a month and were easy to cope with)

raffy · Joined: 25 May 2005 Posts: 4639 Location: Manila

The access control (ACL) in the config is correct - write and comments by registered users only. I wonder if some pages had revised ACLs from the past.

Lobster · Posted: Mon 23 Jul 2007, 11:09 Post_subject:

I can change the ACL's manually - I did this with the breached sites and reverted them

John Doe · Joined: 01 Aug 2005 Posts: 1689 Location: Michigan, US

I don't own my page anymore Crying or Very sad

http://www.puppylinux.org/wikka/ShellScriptsExamples

Lobster · Posted: Mon 23 Jul 2007, 20:49 Post_subject:

You do again
just changed it
Smile

(had to change for some reason due to recent attack - changed back again)

Any other pages I own you also want (or anyone wants) please ask

It is a while since I have put any of my pages in public ownership (no owner) because of any registered spammers

So anyone seeing public pages, please take ownership

Also any pages that are combined leaving a spare page
I can delete the superflous page Smile

John Doe · Joined: 01 Aug 2005 Posts: 1689 Location: Michigan, US

thanks.

Lobster · Posted: Tue 24 Jul 2007, 22:05 Post_subject:

raffy

here is some potential code for blocking the spam
http://wikkawiki.org/SpamBlacklist

Smile

Lobster · Posted: Fri 19 Oct 2007, 02:36 Post_subject: Demontors stirring . . .

An unregistered user
thaisimobiliaria34.static.gvt.net.br

placed some nonsense word on top of this page
http://puppylinux.org/wikka/ConvertingFormats

(I deleted the word) - check out page history if you are interested
The word is used as a locating beacon for a future spam attack by spam bots

Keep an eye out for this behaviour

raffy · Joined: 25 May 2005 Posts: 4639 Location: Manila

Yeah, I wonder why unregistered users can make an edit. Probably, the wiki needs checking of page ACL (some pages that escaped scrutiny in the past).

Lobster · Posted: Fri 19 Oct 2007, 03:17 Post_subject:

this can be done from the SQL database - which you have access to Raffy

I think there is a ACL section and then click on Browse - something like that . . .

also the following pages will be locked page index and comments as there is no reason to edit the
but I have seen spammers edit them to cover their tracks

http://puppylinux.org/wikka/PageIndex
http://puppylinux.org/wikka/RecentlyCommented

as these are often targeted (so you can not see what is happened - I will go and do that now - should be able to . . .

I have loosened ACL's for this page TalkingStickIdeas
but if the death eaters strike, then it will be tightened again . . .

raffy · Joined: 25 May 2005 Posts: 4639 Location: Manila

Thanks, Lobster. I did a quick check and some pages can be commented by the public (*). Will have to set these to "registered-users only" (+).

Lobster · Posted: Mon 29 Nov 2010, 07:39 Post_subject:

raffy · Joined: 25 May 2005 Posts: 4639 Location: Manila

I have reset the default comment ACL to registered users only. Admins, please take note. Thanks.