NIWA Community Forums

NIWA Community => NIWA Discussion => Topic started by: HavocReaper48 on March 20, 2011, 03:33:19 PM

Title: DKWiki is under serious attack
Post by: HavocReaper48 on March 20, 2011, 03:33:19 PM
http://www.donkeykongwiki.com/Special:RecentChanges (http://www.donkeykongwiki.com/Special:RecentChanges)

Has this happened to anyone else? And can anyone assist the reverts?
Title: Re: DKWiki is under serious attack
Post by: Member#36 on March 20, 2011, 03:34:30 PM
Have you added the extension to where a user must answer a question before saving the edit?
Title: Re: DKWiki is under serious attack
Post by: porplemontage on March 20, 2011, 03:38:46 PM
Have you added the extension to where a user must answer a question before saving the edit?
Yes, but it doesn't stop human vandals.
Title: Re: DKWiki is under serious attack
Post by: HavocReaper48 on March 20, 2011, 03:43:39 PM
Have you added the extension to where a user must answer a question before saving the edit?
Yes, but it doesn't stop human vandals.
Yeah, DKWiki has had spammer accounts before but this is the first major flesh & blood vandal wiki attack in DKWiki history since the April Fools Incident. And that was on Wikia.
Title: Re: DKWiki is under serious attack
Post by: UltimateSephiroth on March 20, 2011, 06:29:07 PM
For now, what would probably help you the most is to restrict editing temporarily to staff only.

Deriving from MediaWiki manual (http://www.mediawiki.org/wiki/Manual:User_rights), this would probably look as follows (added into LocalSettings.php), though I'm not especially familiar with administrative MediaWiki using, so you might want to check it yourself:
Code: [Select]
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = false;
$wgGroupPermissions['sysop']['edit'] = true;

Also holy crap I haven't been here for ages. :F
Title: Re: DKWiki is under serious attack
Post by: HavocReaper48 on March 20, 2011, 07:22:52 PM
More specifically, where do I add that coding?

Like, "MediaWiki:__"?
Title: Re: DKWiki is under serious attack
Post by: UltimateSephiroth on March 20, 2011, 07:43:40 PM
More specifically, where do I add that coding?

Like, "MediaWiki:__"?
If you don't have access to the site FTP (or physical access to the server), you can't do it. That method would involve editing a configuration file, not a database entry like a wiki page (or metapage).
Title: Re: DKWiki is under serious attack
Post by: Jake on March 20, 2011, 08:26:16 PM
If you have permission, you can also use Special:LockDB to shut down editing until your server admin can add that code. :)
Title: Re: DKWiki is under serious attack
Post by: Greenpickle on March 21, 2011, 08:34:18 AM
Maybe there's a way to restrict making large changes, as all of those edits seem to be, to autoconfirmed users (users with 4-day-old accounts according to MediaWiki (http://www.mediawiki.org/wiki/Project:Autoconfirmed_users); according to porple (http://www.pikminwiki.com/User_talk:Porplemontage#reuploads), they need 10 edits too, though this might just be something he's configured)?  That would block most of the edits, but I have no idea if it's possible...  If you can't, a good start would at least be only allowing autoconfirmed users to create pages, maybe.
Title: Re: DKWiki is under serious attack
Post by: Miles of SmashWiki on March 21, 2011, 04:34:52 PM
Same guy hit SmashWiki, as you may have seen; just revert, block and be sure to restrict account creation on the block form.  Is there something more major that would need to be done?
Title: Re: DKWiki is under serious attack
Post by: Xizor on March 22, 2011, 03:28:11 AM
Yeah, really the only way to stop a vandal is to restrict their access and/or just clean up after them.

Others will have more sufficient technical advice.
Title: Re: DKWiki is under serious attack
Post by: Member#36 on March 22, 2011, 09:12:40 PM
It seems that the issue has been taken care of.
Title: Re: DKWiki is under serious attack
Post by: Omega Tyrant on March 22, 2011, 11:23:17 PM
Same guy hit SmashWiki, as you may have seen; just revert, block and be sure to restrict account creation on the block form.  Is there something more major that would need to be done?

The vandal had a changing IP, so that was ineffective. Regardless, he is gone for now.
Title: Re: DKWiki is under serious attack
Post by: tacopill on March 26, 2011, 06:14:38 AM
Same guy hit SmashWiki, as you may have seen; just revert, block and be sure to restrict account creation on the block form.  Is there something more major that would need to be done?

The vandal had a changing IP, so that was ineffective. Regardless, he is gone for now.

good to hear he left.....  my guess is he got bored.