From: Reini U. <ru...@x-...> - 2006-03-10 09:37:39
|
Delete the xmlrpc method putPage in lib\XmlRpcServer.php Just disable these three lines: $wiki_dmap['putPage'] =3D array('signature' =3D> array(array($xmlrpcStruct, $xmlrpcString, $xmlrpcString, $xmlrpcString, $xmlrpcString)), 'documentation' =3D> 'put the raw Wiki text into a page as new vers= ion', 'function' =3D> 'putPage'); 2006/3/9, Przemyslaw Wesolek <prz...@go...>: > I maintain a small wiki at wiki.go.art.pl. It runs PHPWiki 1.3.11p1. > > Although there is CAPTCHA turned on, some spammers seem not to care > about it -- I suspect bots, so there must be a way to skip CAPTCHA > checkings. Plugins? Well, some spamerrs get well paid, so they do it manually. NUM_SPAM_LINKS =3D 20 is usually the best. > I disabled (i.e. removed) AddComment, Calendar, CalendarList and > WikiBlog, but there is still some spam -- see > http://wiki.go.art.pl/index.php/RecentChanges. Can anyone suggest what > else can be the backdoor? -- Reini Urban http://phpwiki.org/ http://spacemovie.mur.at/ http://helsinki.at/ |