Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-18 Thread Maxwell Smart 

Thank you for your efforts Pak

On 09/18/2011 09:58 PM, Pak Ogah wrote:

On 09/08/11 20:49, Jake Vickers wrote:

On 09/08/2011 02:42 AM, Pak Ogah wrote:

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

..

How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating
http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing 




# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit'] = false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;



These options are all implemented.



Thanks Jake, I have monitoring new pages on wiki.
And I am only found 3 spam pages within a week. (period Sept 12 - 19)

- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com





--
Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA  94501

tel 510.865.2787
http://yother.com
Check out the new Volvo classified resource http://www.volvoclassified.com


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-18 Thread Pak Ogah 

On 09/08/11 20:49, Jake Vickers wrote:

On 09/08/2011 02:42 AM, Pak Ogah wrote:

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

..

How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating
http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing 




# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit'] = false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;



These options are all implemented.



Thanks Jake, I have monitoring new pages on wiki.
And I am only found 3 spam pages within a week. (period Sept 12 - 19)

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-08 Thread Pak Ogah 

Yap, and that what this extention do
http://www.mediawiki.org/wiki/Extension:SimpleAntiSpam

installation can be done in 2 steps

1. Download the files
   
   into |$IP
   /extensions/SimpleAntiSpam|
2. Add the following to LocalSettings.php
   :
   require_once("$IP/extensions/SimpleAntiSpam/SimpleAntiSpam.php");



On 09/08/11 21:51, Sergio Rosa wrote:

I'm no expert on mediawiki, sorry.

This is kinda "stupid" and "basic" measure and would involve on some 
programming/code changing.


Assuming that the BOTs are "blind" and that they post information on 
whatever field available on any page, why not place a field, not 
visible on the layout, to the humans, or if visible with instruction 
not to place any info in it. The BOTs will place some info on it, 
right? They are "blind". The when posting, "just" verify if that field 
is empty or not, if not then you got a no human posting and the 
page/post shouldn't be accepted.


I'm no expert on fighting BOT's, neither I know if this can be made on 
mediawiki.


If this is nonsense, just discard.

---
Obrigado,
Sérgio Rosa

T. +351 91348 9195
@. sergior...@awd.pt

AWD - Arq. Web e Design, Unip. Lda
R. Moinho Velho, 19, 2ºDto
2655-242 Ericeira
http://www.awd.pt

On Thu, 08 Sep 2011 09:49:14 -0400, Jake Vickers wrote:

On 09/08/2011 02:42 AM, Pak Ogah wrote:

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

for the first type I don't know how to monitor it unless I open the
pages one-by-one to check it.
the second type, I can see the new pages by clicking Special page 
called

New Pages.
but either of it, all user that used to create or edit the pages is
non-existing, they don't have profile.

If you expertise on MediaWiki and have time to check QMT Wiki page, I
think Jake can grant you a privileges.
I have ask these requirement to be implemented on Wiki but I don't know
will it suffice or not to minimize wikispam


How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating

http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing 




# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit'] = false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;



These options are all implemented.



- 


Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!

- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.

 To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-08 Thread Sergio Rosa 

I'm no expert on mediawiki, sorry.

This is kinda "stupid" and "basic" measure and would involve on some 
programming/code changing.


Assuming that the BOTs are "blind" and that they post information on 
whatever field available on any page, why not place a field, not visible 
on the layout, to the humans, or if visible with instruction not to 
place any info in it. The BOTs will place some info on it, right? They 
are "blind". The when posting, "just" verify if that field is empty or 
not, if not then you got a no human posting and the page/post shouldn't 
be accepted.


I'm no expert on fighting BOT's, neither I know if this can be made on 
mediawiki.


If this is nonsense, just discard.

---
Obrigado,
Sérgio Rosa

T. +351 91348 9195
@. sergior...@awd.pt

AWD - Arq. Web e Design, Unip. Lda
R. Moinho Velho, 19, 2ºDto
2655-242 Ericeira
http://www.awd.pt

On Thu, 08 Sep 2011 09:49:14 -0400, Jake Vickers wrote:

On 09/08/2011 02:42 AM, Pak Ogah wrote:

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

for the first type I don't know how to monitor it unless I open the
pages one-by-one to check it.
the second type, I can see the new pages by clicking Special page 
called

New Pages.
but either of it, all user that used to create or edit the pages is
non-existing, they don't have profile.

If you expertise on MediaWiki and have time to check QMT Wiki page, 
I

think Jake can grant you a privileges.
I have ask these requirement to be implemented on Wiki but I don't 
know

will it suffice or not to minimize wikispam


How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating

http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing


# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit'] = false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;



These options are all implemented.



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.
 If you need professional help with your setup, contact them 
today!


-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

 To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-08 Thread Jake Vickers 

On 09/08/2011 02:42 AM, Pak Ogah wrote:

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

for the first type I don't know how to monitor it unless I open the
pages one-by-one to check it.
the second type, I can see the new pages by clicking Special page called
New Pages.
but either of it, all user that used to create or edit the pages is
non-existing, they don't have profile.

If you expertise on MediaWiki and have time to check QMT Wiki page, I
think Jake can grant you a privileges.
I have ask these requirement to be implemented on Wiki but I don't know
will it suffice or not to minimize wikispam


How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating
http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing


# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit'] = false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;



These options are all implemented.


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-07 Thread Pak Ogah 

Halo Sergio,
there are two kind of spam attacking the wiki

1. editing existing pages
2. creating new spam pages

for the first type I don't know how to monitor it unless I open the 
pages one-by-one to check it.
the second type, I can see the new pages by clicking Special page called 
New Pages.
but either of it, all user that used to create or edit the pages is 
non-existing, they don't have profile.


If you expertise on MediaWiki and have time to check QMT Wiki page, I 
think Jake can grant you a privileges.
I have ask these requirement to be implemented on Wiki but I don't know 
will it suffice or not to minimize wikispam



How about we turn on new account's email validation feature?
Please see:
http://www.gossamer-threads.com/lists/wiki/mediawiki/83969
http://www.mediawiki.org/wiki/Manual:Combating_spam#Restrict_editing

And restrict no anonymous editing/creating
http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_anonymous_editing

# Anonymous users can't edit pages
$wgGroupPermissions['*']['edit']  =  false;
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage']  =  false;

And can I suggest that the wiki need to be installed by others Antispam 
extentions, like:

http://www.mediawiki.org/wiki/Extension:SimpleAntiSpam
http://www.mediawiki.org/wiki/Extension:AntiBot
http://www.mediawiki.org/wiki/Extension:Check_Spambots

and if you mind, please create a crontab to cleanup spam as described here:
http://www.mediawiki.org/wiki/Anti-spam_features#Spam_cleanup_script

On 09/07/11 22:14, Sergio Rosa wrote:

are this attacks made by human or BOT?

Have any of this recommendations implemented? 
http://www.mediawiki.org/wiki/Manual:Combating_spam


I've been somewhat apart from the list/project.

Thanks

---
Obrigado,
Sérgio Rosa

T. +351 91348 9195
@. sergior...@awd.pt

AWD - Arq. Web e Design, Unip. Lda
R. Moinho Velho, 19, 2ºDto
2655-242 Ericeira
http://www.awd.pt

On Wed, 07 Sep 2011 11:03:00 -0400, Jake Vickers wrote:

On 09/03/2011 02:37 PM, Robert Lee wrote:

A number of people have defaced the qmailtoaster wiki page.





Everyone on the list - can we get some help with this? Pak Ogah and
myself have been working on this for some time - there seem to be a
lot of holes in Mediawiki that we've been working on plugging.
Mediawiki themselves rely on their mass number of members to clean out
any spam added to the their wiki. We need help on ours.
Spam should be blatantly obvious. The QMT project has nothing to do
with car insurance for example, so any links to car insurance may be
removed :)
Thanks.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-07 Thread Jake vickers 

On 09/07/2011 11:14 AM, Sergio Rosa wrote:

are this attacks made by human or BOT?

Have any of this recommendations implemented? 
http://www.mediawiki.org/wiki/Manual:Combating_spam


I've been somewhat apart from the list/project.

Thanks


Most of the recommendations from that page have been implemented.

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-07 Thread Sergio Rosa 

are this attacks made by human or BOT?

Have any of this recommendations implemented? 
http://www.mediawiki.org/wiki/Manual:Combating_spam


I've been somewhat apart from the list/project.

Thanks

---
Obrigado,
Sérgio Rosa

T. +351 91348 9195
@. sergior...@awd.pt

AWD - Arq. Web e Design, Unip. Lda
R. Moinho Velho, 19, 2ºDto
2655-242 Ericeira
http://www.awd.pt

On Wed, 07 Sep 2011 11:03:00 -0400, Jake Vickers wrote:

On 09/03/2011 02:37 PM, Robert Lee wrote:

A number of people have defaced the qmailtoaster wiki page.





Everyone on the list - can we get some help with this? Pak Ogah and
myself have been working on this for some time - there seem to be a
lot of holes in Mediawiki that we've been working on plugging.
Mediawiki themselves rely on their mass number of members to clean 
out

any spam added to the their wiki. We need help on ours.
Spam should be blatantly obvious. The QMT project has nothing to do
with car insurance for example, so any links to car insurance may be
removed :)
Thanks.


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.
 If you need professional help with your setup, contact them 
today!


-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

 To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: qmailtoaster wiki main page defaced

2011-09-07 Thread Jake Vickers 

On 09/03/2011 02:37 PM, Robert Lee wrote:

A number of people have defaced the qmailtoaster wiki page.





Everyone on the list - can we get some help with this? Pak Ogah and 
myself have been working on this for some time - there seem to be a lot 
of holes in Mediawiki that we've been working on plugging. Mediawiki 
themselves rely on their mass number of members to clean out any spam 
added to the their wiki. We need help on ours.
Spam should be blatantly obvious. The QMT project has nothing to do with 
car insurance for example, so any links to car insurance may be removed :)

Thanks.

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com