Re: coordinated spam attack on wikicreole.org and jspwiki.org

The three actions there are
"saveProfile","setAssertedName"and"clearAssertedName".
Are you saying that commenting out the "saveProfile" condition should do the
trick?


On 9/27/07, Janne Jalkanen <[email protected]> wrote:
>
> > IOW, I register my users by editing the userdatabase and group database
> > myself and plan to eliminate the "Join Jspwiki link" so that users have
> to
> > login to edit. Does this safe gaurd me from a bot that knows how to
> > register?
>
> No.  My analysis shows that it does a POST to UserPreferences.jsp
> directly, so you would need some way of preventing new user creation.
> I think commenting out something suitable in UserPreferences.jsp
> should do the trick.
>
> /Janne
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>