Re: coordinated spam attack on wikicreole.org and jspwiki.org

Janne Jalkanen <[email protected]> Thu, 27 Sep 2007 16:26:40 +0300
Newsgroups gmane.comp.java.jspwiki.user
Message-ID <[email protected]>
> IOW, I register my users by editing the userdatabase and group database
> myself and plan to eliminate the "Join Jspwiki link" so that users have to
> login to edit. Does this safe gaurd me from a bot that knows how to
> register?

No.  My analysis shows that it does a POST to UserPreferences.jsp
directly, so you would need some way of preventing new user creation.
I think commenting out something suitable in UserPreferences.jsp
should do the trick.

/Janne