phpwiki-talk

[Phpwiki-talk] Spam problems

[Przemyslaw W. <prz...@go...>]

Hi.

I maintain a small wiki at wiki.go.art.pl. It runs PHPWiki 1.3.11p1.

Although there is CAPTCHA turned on, some spammers seem not to care 
about it -- I suspect bots, so there must be a way to skip CAPTCHA 
checkings. Plugins?

I disabled (i.e. removed) AddComment, Calendar, CalendarList and 
WikiBlog, but there is still some spam -- see 
http://wiki.go.art.pl/index.php/RecentChanges. Can anyone suggest what 
else can be the backdoor?

Regards,
Przemek

Re: [Phpwiki-talk] Spam problems

[Reini U. <ru...@x-...>]

Delete the xmlrpc method putPage in lib\XmlRpcServer.php
Just disable these three lines:
$wiki_dmap['putPage']
=3D array('signature'     =3D> array(array($xmlrpcStruct, $xmlrpcString,
$xmlrpcString, $xmlrpcString, $xmlrpcString)),
        'documentation' =3D> 'put the raw Wiki text into a page as new vers=
ion',
        'function'      =3D> 'putPage');

2006/3/9, Przemyslaw Wesolek <prz...@go...>:
> I maintain a small wiki at wiki.go.art.pl. It runs PHPWiki 1.3.11p1.
>
> Although there is CAPTCHA turned on, some spammers seem not to care
> about it -- I suspect bots, so there must be a way to skip CAPTCHA
> checkings. Plugins?

Well, some spamerrs get well paid, so they do it manually.
NUM_SPAM_LINKS =3D 20 is usually the best.

> I disabled (i.e. removed) AddComment, Calendar, CalendarList and
> WikiBlog, but there is still some spam -- see
> http://wiki.go.art.pl/index.php/RecentChanges. Can anyone suggest what
> else can be the backdoor?
--
Reini Urban
http://phpwiki.org/
http://spacemovie.mur.at/   http://helsinki.at/

Re: [Phpwiki-talk] Spam problems

[Przemyslaw W. <prz...@go...>]

Reini Urban wrote:
> Delete the xmlrpc method putPage in lib\XmlRpcServer.php
> Just disable these three lines:
> $wiki_dmap['putPage']
> = array('signature'     => array(array($xmlrpcStruct, $xmlrpcString,
> $xmlrpcString, $xmlrpcString, $xmlrpcString)),
>         'documentation' => 'put the raw Wiki text into a page as new version',
>         'function'      => 'putPage');

Thanks for the suggestion. I did as you wrote, but it didn't help.

> 
> 2006/3/9, Przemyslaw Wesolek <prz...@go...>:
> 
>>I maintain a small wiki at wiki.go.art.pl. It runs PHPWiki 1.3.11p1.
>>
>>Although there is CAPTCHA turned on, some spammers seem not to care
>>about it -- I suspect bots, so there must be a way to skip CAPTCHA
>>checkings. Plugins?
> 
> 
> Well, some spamerrs get well paid, so they do it manually.
> NUM_SPAM_LINKS = 20 is usually the best.

I suspect bots as the names of pages are always the same, like 
PucharWarszawy2003-10-19.

Przemek

Re: [Phpwiki-talk] Spam problems

[Reini U. <ru...@x-...>]

2006/3/12, Przemyslaw Wesolek <prz...@go...>:
> Reini Urban wrote:
> > Delete the xmlrpc method putPage in lib\XmlRpcServer.php
> > Just disable these three lines:
> > $wiki_dmap['putPage']
> > =3D array('signature'     =3D> array(array($xmlrpcStruct, $xmlrpcString=
,
> > $xmlrpcString, $xmlrpcString, $xmlrpcString)),
> >         'documentation' =3D> 'put the raw Wiki text into a page as new =
version',
> >         'function'      =3D> 'putPage');
>
> Thanks for the suggestion. I did as you wrote, but it didn't help.
> >
> > 2006/3/9, Przemyslaw Wesolek <prz...@go...>:
> >
> >>I maintain a small wiki at wiki.go.art.pl. It runs PHPWiki 1.3.11p1.
> >>
> >>Although there is CAPTCHA turned on, some spammers seem not to care
> >>about it -- I suspect bots, so there must be a way to skip CAPTCHA
> >>checkings. Plugins?
> >
> >
> > Well, some spamerrs get well paid, so they do it manually.
> > NUM_SPAM_LINKS =3D 20 is usually the best.
>
> I suspect bots as the names of pages are always the same, like
> PucharWarszawy2003-10-19.

Ok,
Fighting bots which don't add more than 20 new links is hard, as
you cannot really decide if it's good or bad.
I suggest to block the spammers IP then in the apache conf file.

--
Reini Urban
http://phpwiki.org/
http://spacemovie.mur.at/   http://helsinki.at/