Hi all,

I'm running a personal MoinMoin wiki.  I've recently discovered that I've been cracked.  I'm finding lots of entries in the data/pages directory that look like:


All the edit-log files (that I've checked) appear to be empty.  The file also appears to be the only contents of these bogus pages/directories.  As I said, I have a ton of these in my data/pages folder.  And it's been going on for a while, judging by the backup I've looked at.

I'm not sure how it happened or what the intent was.  I'm not sure what exactly has been compromised.  Can I just change my login password and get a better SSL certificate? (I always logged in via https, but maybe the certificate was compromised).

That being said, all is not lost. It's fairly easy for me to pick out my own pages from the mess - looking for folders that have a "revisions" subfolder seems to do the trick.

So I'm seeking some advice on how to proceed.  Can I simply rm -rf the bogus directories from the file system?  If I do this, will I have to update some other cache file?

Should I re-install MoinMoin?  If I do, is there a way to re-import all my original pages into the new wiki (assuming I pulled out all the pages from my old wiki) ?

Thanks in advance for any help!