Good afternoon everyone,
I finished upgrading our mediawiki
wiki.redmountainmakers.org to 1.22.6 last weekend.
Due to some family issues, ended up accessing my ISP to run maintenance scripts from the
command line over an airport network enroute to another city.
This may have been the source of the hacking problem, as due to some problems establishing
a secure connection, I transmitted a password in the clear to my ISP.
Checked back in on the wiki last week to find around 1300 new spammy users.
Have locked down the wiki, blocking new account creation, enabled a captcha, and have
restricted administrator's priviledges to create new accounts.
But the new accounts keep on coming.
Spam blacklist is enabled.
Sysops have been blocked from creating accounts, as have all ordinary users.
I've changed the critical passwords.
Recommendations as to other settings I should be checking?
-- Shirley Hicks