Hi Andy, On Thu, Oct 29, 2009 at 2:18 AM, Andreas Schaefer <[email protected]> wrote:
> Hi > > I just realized that I have a bunch of new users all created with the > same first and last name. I saw one with the same name 'Kunstkamera' > being created also on the XWiki.org (or at least I thought so). > > Any idea what is going on. > Is there someone trying to spam XWiki's and is there anything to be of > concern as an administrator? > Yes, this is XWiki getting spammed. The safest thing to do is to deny the Register & Comment rights to Unregistered Users or setup the email confirmation. We need to implement CAPTCHAs to prevent this but we haven't had the time to do it in the latest releases. Which leads me to another concern: > > Every Import of the Enterprise XAR file is reseting the Admin > password to the default. > > Is there anyway to prevent that because in the heat of the upgrade > procedure that gets easily overlooked ? > Don't import the Admin User ;-) Jérôme is working on a patch where imported files will simply create a new version instead of completely replacing the existing page, once it's applied (hopefully by 2.1 M1) you'll be able to rollback to the previous version of the page to get the old password. Guillaume Cheers - Andy > > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users > -- Guillaume Lerouge Product Manager - XWiki SAS Skype: wikibc Twitter: glerouge http://guillaumelerouge.com/ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
