Ticket #192 (closed defect: fixed)

Opened 6 years ago

Last modified 5 years ago

Mediawiki SpamBlacklist configuration needs checking

Reported by: chris Owned by: chris
Priority: major Milestone: Phase 5
Component: Mediawiki Keywords:
Cc: ed Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 1.0

Description

From logwatch:

Dec  1 15:30:21 quince apache2: PHP Warning:  file_get_contents(/web/wiki.transitionnetwork.org/www/extensions/SpamBlacklist/blacklist) [<a 
 href='function.file-get-contents'>function.file-get-contents</a>]: failed to open stream: No such file or directory in /web/wiki.transitionnetwork.org/www/extensions/SpamBlacklist/SpamBlacklist_body.php on line 130

Change History

comment:1 Changed 5 years ago by chris

  • Priority changed from minor to major
  • Status changed from new to accepted
  • Milestone set to Phase 5

Need to look at this, wiki is being spammed: ​https://wiki.transitionnetwork.org/index.php?title=Special:RecentChanges&days=90

comment:2 Changed 5 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 1.0
  • Status changed from accepted to closed
  • Resolution set to fixed
  • Total Hours changed from 0.0 to 1.0

I have deleted all the spam and blocked the spam accounts:

​http://wiki.transitionnetwork.org/index.php?title=Special:RecentChanges&from=20110817111328&days=60

I have set both the live and the dev mediawiki sites so that accounts can only be created by administrators and I have also made all the usernames I recognise administrators and bureaucrats (bureaucrats can create administrators) and this has been documented on the front page and in more detail on the about page ​https://wiki.transitionnetwork.org/TransitionWiki:About

The SpamBlacklist extension has been disabled and I have updated the trac docs here wiki:NewLiveServer#mediawiki

At some point in the future we could set up a form for people to use to request accounts using this extension: ​https://secure.wikimedia.org/wikipedia/mediawiki/wiki/Extension:ConfirmAccount if the manually sending a email system doesn't work out.

Note: See TracTickets for help on using tickets.