Feminist SF Wiki:Change log (2011)

2011 log

• 2011/01/14 - lots of image uploads, so installing Extension:MultiUpload --LQ 19:49, 14 January 2011 (PST)
• 2011/02/18 -
  • discovered spam in wiki.feministsf.net/skins/MonoBook.php, by seeing a spam wrapper show up on [1]. Triggered by one of the words here (which include "sperm"), or simply appearing periodically? Can't figure it out. Grr!
  • Moved all MonoBook.php-related files to 20110218.spammed.* filenames (there were 4); uploaded clean MonoBook.php files (there were two) from mediawiki.org (ver. 1.16.2). will this fix the problem?
  • still having the problem. it shows up on an edit-save or an edit-view of that page (Female_reproduction_without_men_(list_of_works)). Haven't yet seen it on any other page. ... Hitting reload from URL line brings up the original page. It's a wrapper attack.
  • testing: triggered on Parthenogenesis in SF which also has word sperm in it.
  • note: not triggered on this page, which now has word sperm in it.
  • edits on any page I test are now producing this spam wrapper. Also, edits from any browser on this laptop. and, edits from other user. applies only to mainspace edits?
  • infected files: wcache.dat in root mediawiki directory ... infected content also showing up in multiple cache files at maintenance/sqlite/archives/cache ...
  • mv wcache.dat to a 20110218.spammed.* file.
  • but STILL getting the goddamned cialis spam file!
  • entirely replaced fsfwiki directory with an older fsfwiki directory. removed the "multiupload" extension to facilitate replacement (since I don't have time to re-install it right now). Otherwise it's okay, except now edit windows are really tiny; empty links show up with red question marks; and a few other annoying issues.
• 2011/03/19 - Trying to get back to this, because the goddamned spammers have hacked recaptcha.
  • enabling confirmedit.php
  • setting permissions to use a math captcha.

• 2011/06/28 - LQ. Spammers as active as ever. So, edits to LocalSettings.php:
  • setting $wgGroupPermissions for new users (< 7 days, not confirmed by email) to not have editing privileges. tested with accounts lquilterjuly05 and lquilterjuly05b.
  • References:
    • http://www.mediawiki.org/wiki/Manual:User_rights
    • http://www.mediawiki.org/wiki/Manual:Preventing_access
    • http://www.mediawiki.org/wiki/Manual:$wgAutoConfirmAge
  • 6/29 - noting a shitload of new user accounts, all obviously spammers. however, no spam! i suppose they're waiting to see if they're aged in.

• 2011/06/28 - LQ. Removed MultiUpload from MediaWiki:Sidebar, since previously disabled in LocalSettings.php anyway!
• 2011/07/11 - LQ. Adding in QuestyCaptcha with a bunch of feminist-oriented questions. Outstanding problems: how to deal with language issues?
• 2011/08/28 - update: spam registrations way down but not completely disappeared; spam volume 95% down.

• 2011/08/29 -- FSFwiki:Fix wikilink display -- fixed default redlink display issue. seems to have also fixed the "edit window" size issue, too, and the "Special:RecentChanges" problem (started with 0 / 0) also.

• 2011/10/06 -- Added Special:UserScore page. See http://www.mediawiki.org/wiki/Extension:SpecialUserScore .