Sol Invictus wrote:
Greetings,
As of a few months ago, I've been getting spam pages generated on my wiki. I upgraded to the latest mediawiki release and I added recaptcha to login and anonymous edit, but spam accounts and pages are still being created. I added debug output to the recaptcha extension to show me when it accepts or denies input, but it seems it isn't even getting called when the spam accounts are being created. Is there a known security hole with recaptcha and the latest mediawiki version? An log example is below (with a couple modifications for privacy).
Thanks, Sol
There is probably some weakness inside recaptcha plugin (or they simply broke recaptcha), as I have seen other wikis heavily spammed albeit using recaptcha.