Re: coordinated spam attack on wikicreole.org and jspwiki.org
Janne Jalkanen <[email protected]> Thu, 27 Sep 2007 16:26:40 +0300
| Newsgroups | gmane.comp.java.jspwiki.user |
|---|---|
| Message-ID | <[email protected]> |
> IOW, I register my users by editing the userdatabase and group database > myself and plan to eliminate the "Join Jspwiki link" so that users have to > login to edit. Does this safe gaurd me from a bot that knows how to > register? No. My analysis shows that it does a POST to UserPreferences.jsp directly, so you would need some way of preventing new user creation. I think commenting out something suitable in UserPreferences.jsp should do the trick. /Janne