[Mediawiki-l] Spam account creation, circumventing recaptcha
Platonides
Platonides at gmail.com
Tue Mar 8 00:01:41 UTC 2011
Sol Invictus wrote:
> Greetings,
>
> As of a few months ago, I've been getting spam pages generated on my
> wiki. I upgraded to the latest mediawiki release and I added recaptcha
> to login and anonymous edit, but spam accounts and pages are still
> being created. I added debug output to the recaptcha extension to show
> me when it accepts or denies input, but it seems it isn't even getting
> called when the spam accounts are being created. Is there a known
> security hole with recaptcha and the latest mediawiki version? An log
> example is below (with a couple modifications for privacy).
>
> Thanks,
> Sol
There is probably some weakness inside recaptcha plugin (or they simply
broke recaptcha), as I have seen other wikis heavily spammed albeit
using recaptcha.
More information about the MediaWiki-l
mailing list