Re: [Phpwiki-talk] Preventing Wiki spam

[Reini U. <ru...@x-...>]

Charles Corrigan schrieb:
> I use a wiki (phpwhiki v1.2) that is frequently hit by vandals/wiki spam.
> I am implementing phpwiki CVS 1.3.11pre to allow the wiki to be read
> without authentication but to require logins for editing etc.
> 
> However, anyone can create a new id in a few seconds and then vandalise
> away...  Is there any suggestions as to how I can make user id
> creation/authorisation 2-phase. What I would like is for users to self
> register but be treated as anonymous until an adminstrator authorises them
> to edit/create pages.
> 
> Is there an alternative configuration of the wiki to achieve this?

So far the best is to use PageChangeNotification, which catches every 
spam attempt. Last on saturday.

We have three more options:
* phpwiki.org/PageModeration
   (delay any action on a page, after a moderator accepts it),
* the WikiAccessRestriction plugin I was working on,
* and the proposed external hook to spamassasin (babycart) after every edit.

All of these will not be ready for 1.3.11.

Your two-phase user creation would also be cool, but I haven't thought 
about that yet. Though that's the tradional method.

I'm much more concerned about 8MB memory limit, the still pending sf.net 
upgrade (they promised it two weeks ago), and my latest WikiDB changes.

> I am using MySQL 4.0.20 to hold the user tables. PHP 4.3.8, Apache 1.3.31,
> Linux 2.4.21.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/