From: Carsten K. <car...@us...> - 2003-11-11 21:12:06
|
On Sunday, November 9, 2003, at 01:54 pm, Neale Pickett wrote: > I got some spam on my wiki last night :< It appears this fellow is > going > through google to find PHPWiki-rendered pages, and inserting his little > advertisement. You can see the result here: > > http://wiki.woozle.org/BuyingaNewComputer?action=diff&version=5 > > Sure, it was easy to take out, but when someone writes a program to do > this automatically, I guess we're all going to have to require > authentication for edits, or spend large chunks of time removing ads. > > > Weblog entry point: > > wiki.woozle.org 202.156.2.138 - - [09/Nov/2003:00:00:05 -0800] "GET > /BuyingaNewComputer HTTP/1.1" 200 16099 > "http://www.google.com.sg/ > search?q=computer+Page+Execution+took++Edit&hl=en&lr=&ie=UTF-8&oe=UTF- > 8&start=10&sa=N" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; > .NET CLR 1.1.4322)" > > > Neale > (Please Cc me in replies) Hi Neale, This does indeed sound like a very disturbing trend, thanks for the heads-up. Have you tried this setting in index.php? This might trip-up or at least slow down any automatic WikiSpamScripts, by forcing a (BOGO- or WikiWord- user-name) login first: if (!defined('ALLOW_BOGO_LOGIN')) define('ALLOW_BOGO_LOGIN', true); if (!defined('REQUIRE_SIGNIN_BEFORE_EDIT')) define('REQUIRE_SIGNIN_BEFORE_EDIT', true); Maybe it would be a good idea to set these as the defaults in index.php for the next release? Any thoughts? Carsten |