Sol Invictus wrote:
Greetings,
As of a few months ago, I've been getting spam pages generated on my
wiki. I upgraded to the latest mediawiki release and I added recaptcha
to login and anonymous edit, but spam accounts and pages are still
being created. I added debug output to the recaptcha extension to show
me when it accepts or denies input, but it seems it isn't even getting
called when the spam accounts are being created. Is there a known
security hole with recaptcha and the latest mediawiki version? An log
example is below (with a couple modifications for privacy).
Thanks,
Sol
There is probably some weakness inside recaptcha plugin (or they simply
broke recaptcha), as I have seen other wikis heavily spammed albeit
using recaptcha.