Re: coordinated spam attack on wikicreole.org and jspwiki.org

Correct. Removing the saveProfile target will disable registrations.

On Sep 27, 2007, at 10:25 AM, Claudia Frers <[email protected]>  
wrote:

> The three actions there are
> "saveProfile","setAssertedName"and"clearAssertedName".
> Are you saying that commenting out the "saveProfile" condition  
> should do the
> trick?
>
>
> On 9/27/07, Janne Jalkanen <[email protected]> wrote:
>>
>>> IOW, I register my users by editing the userdatabase and group  
>>> database
>>> myself and plan to eliminate the "Join Jspwiki link" so that users  
>>> have
>> to
>>> login to edit. Does this safe gaurd me from a bot that knows how to
>>> register?
>>
>> No.  My analysis shows that it does a POST to UserPreferences.jsp
>> directly, so you would need some way of preventing new user creation.
>> I think commenting out something suitable in UserPreferences.jsp
>> should do the trick.
>>
>> /Janne
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
>>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList