Re: spammers on my wiki

> I have a 1.3.11+ phpwiki running on my site www.hollenback.net.  
> Spammers are exploiting a hole somewhere to create new pages (see 
> http://www.hollenback.net/index.php/PostScript) even though the site is 
> locked and I'm the only person with access.
> 
> The AddComment plugin is installed but I modified the posting method to 
> always fail.  I did this to preserve existing AddComment entries but not 
> allow new ones a few years back.
> 
> Can anyone suggest what hole is being exploited here?  I get about one 
> new page a week through this and it is a pain.

> [email protected]

Through the CreatePage plugin.

CreatePage?s=SpamPage&initial_content=Buy%20Viagra

I changed it at your site.


-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/



------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/