[Mediawiki-l] Spam account creation, circumventing recaptcha

OQ overlordq at gmail.com
Mon Mar 7 16:47:33 UTC 2011


On Mon, Mar 7, 2011 at 10:27 AM, Sol Invictus <solinvic at gmail.com> wrote:
> Greetings,
>
> As of a few months ago, I've been getting spam pages generated on my
> wiki. I upgraded to the latest mediawiki release and I added recaptcha
> to login and anonymous edit, but spam accounts and pages are still
> being created. I added debug output to the recaptcha extension to show
> me when it accepts or denies input, but it seems it isn't even getting
> called when the spam accounts are being created. Is there a known
> security hole with recaptcha and the latest mediawiki version? An log
> example is below (with a couple modifications for privacy).

Switching to MathCaptcha has pretty much solved my problem for now.



More information about the MediaWiki-l mailing list