RE: [Phpwiki-talk] secure phpwiki: request for example

[Philip J. H. <ph...@po...>]

I guess what we're seeing is that spammers are finally really starting
to hit wikis.  Maybe the crackdown on blog comment spam is forcing them
to move?

The difficult part of this is that the wiki philosophy is all about the
freedom for anyone to edit.  That has always freaked a lot of people
out.  Unfortunately, they now have a good reason to be scared: spammers
will mess with all your pages!

Thus, I really think that spam blocking / detection / limiting is THE
big issue for wikis now.  We're at a critical point: mainstream users
are starting to wake up to the wiki philosophy.  I just helped my
non-technical friend set up a wiki for his work (www.dbrig.com).  Wil
Wheaton just two days ago wondered on his blog if he should set up a
wiki.  Now is the time for wikis - assuming the spam doesn't drown us
all.

I really, really want to open my website www.hollenback.net back up for
anyone to edit.  Thus it seems like blacklists and captchas are the way
to go.  I don't want to force people to log in - that drives away the
majority of potential contributors right away.  However, a unified login
mechanism such as Typekey might not be so bad.

As an aside, some people say the majority of wiki spam is coming from
China (see www.chongqed.com).  However, I see that the spam on wiki
(until I locked it down) was coming from Russia.  What are other people
seeing?

P.

ps - in regards to my website, I am hoping that the SpamAssassin plugin
will be effective.  Thus I wait for an actual 1.3.11 release.  I sure
hope that comes out soon!


On Thu, 31 Mar 2005 21:13:00 +0800, "Charles Corrigan"
<ch...@ru...> said:
> There have been a lot of fixes post 1.3.10 in this area. I suggest
> that you get 1.3.11-rc and try that. I wrote doc/README.security
> describing my mechanism to get exactly the configuration that you
> require.
>
> It's funny all of my recent posts mention this document :-)
>
> Regards, Charles
>
>
> -----Original Message----- From: Stan Berka [mailto:sb...@po...]
> Sent: 31 March 2005 06:42 To: php...@li...
> Subject: [Phpwiki-talk] secure phpwiki: request for example
>
> Hi, I have tried to configure PhpWiki in secure mode:  everyone can
> view, only authorized users can edit.  That simple.  But I've never
> succeeded.  My last try is here http://www.berka.name/phpwiki in case
> you want to try it out.  Try to sign-in.  It's ver. 1.3.10.
>
> Could anyone provide information leading to a working configuration
> like this?  I mean: which phpwiki version, provide a config file and
> any other info that matters?  This installation is on
> Linux/Apache/mysql.
>
> I'd really appreciate your help.  I'm using phpwiki in our office all
> the time; it's wonderfull, but here I need a secure mode and...
>
> I'm attaching below the config.ini from berka.name; lines commented
> out are removed.
--  
Philip J. Hollenback
ph...@po...
www.hollenback.net