PhpWiki

> I have a 1.3.11+ phpwiki running on my site http://www.hollenback.net.  
> Spammers are exploiting a hole somewhere to create new pages (see 
> http://www.hollenback.net/index.php/PostScript) even though the site is 
> locked and I'm the only person with access.
> 
> The AddComment plugin is installed but I modified the posting method to 
> always fail.  I did this to preserve existing AddComment entries but not 
> allow new ones a few years back.
> 
> Can anyone suggest what hole is being exploited here?  I get about one 
> new page a week through this and it is a pain.

> philiph@...

Through the CreatePage plugin.

CreatePage?s=SpamPage&initial_content=Buy%20Viagra

I changed it at your site.


-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/