Recovery day

[johnridley]

OK, we're back from up north. Last night I discovered that someone has been hijacking the comment plugin on the GT Wiki and spamming and trading illicit links with it. So I spent from about 9PM to midnight manually deleting a couple thousand comments.

The Wiki is now requiring login - I'll try to change that back if I can disable the comments system. It's nice having no login. What would be nice would be to allow any user ID and require the well-known GT password. I have the source, I suppose I could do that if I get time.

Spending the day doing dishes, airing out sleeping bags, etc.

Comments

[abpeed.livejournal.com]

What's it written in? If PHP, I recommend Bad Behavior, which is a set of PHP scripts you include into the main script of your forums/wiki/whatever. It's pretty smart at protecting most types of form input from this type of thing.

You might also want to look around to see if there's a CAPTCHA script you can integrate. (I need to do the same for the rework-in-progress of my personal website, which seems to have fallen victim of the latest hack of Zarquon. My database didn't get dumped with the others before the restore, for some reason.)

[johnridley.livejournal.com]

That's an interesting package. I'm going to leave this for a day or two and watch RecentChanges to see if this comes back. I'll save that link for future reference though.

I may migrate the wiki though. I'm not really happy about it, it's a pretty low-feature system.

[dek9.livejournal.com]

Can you add a captcha to the comment system?

[johnridley.livejournal.com]

A possibility. Actually I've never been terribly happy with PHPWiki. I installed it back when I was hosted on a GoDaddy cheap-ass (tm) account and PHP was all I could use.

I locked down access for now, I'm more likely to switch systems than to put any real amount of energy into securing PHPWiki.

[johnridley.livejournal.com]

Actually, I don't even WANT a comment system. It's built on top of a blog system, which I ALSO don't want. I just can't find docs on how to disable specific plugins. I suspect I just remove the php modules, since they have to be specifically referenced in the Wiki page.

[kevinnickerson.livejournal.com]

I had to patch the Black Hole to prevent comment spam. Any comment with a link is dumped. It solved the problem.