Re: [TWiki-Dev] Re: TagMePlugin breaks TWiki.org

[Peter T. <Peter@StructuredWikis.com>]

After some investigation of the Apache logs and code
I came to the conclusion that the person was pasting
an error message into the "add new tag" field. The
Plugin then did the usual aa_bb_cc conversion, hence
we got this very long tag that messed up the page
layout.

I enhanced the TagMePlugin to cut off long tags on
"add new tag".

Regards,
Peter


Peter Thoeny wrote:
> That looks like a scripted attack, similar to the
> scripted registration attempts, such as:
>  > | 05 May 2006 - 00:54 | Main.Your site design is very nice.
>  > You can now rarely meet something like this on the net.a
>  > href = (snip) | blacklist | Main.TWikiRegistration |
>  > REGEXPIRE: Magic 27830 is missing, bad or expired |
>  > 205.234.138.153 |
> 
> I removed the offending line, and will investigate...
> 
> Regards,
> Peter
> 
> 
> Michael Daum wrote:
> 
>> Hi Peter,
>>
>> Some wild tag has been  added to twiki.org's tag system and now pages 
>> look bad.
>> There's a tag 
>> "tue_may_09_120344_2006_error_client_193206208201_unmatched__in_regex_marked_by____here_in_m__xism____here_s__at__var_www_html_twiki_lib_twikipm_line_1226" 
>>
>> that does not look promising. How could that happen???
>>
>>     Micha.
>>
> 

-- 
    * Peter Thoeny                       Peter@StructuredWikis.com
    * http://StructuredWikis.com - bringing wikis to the workplace
    * http://TWiki.org - is your team already TWiki enabled?
    * This e-mail is:   (_) private    (x) ask first    (_) public