[pmwiki-users] my site is being defaced by comments

Sandy sandy at onebit.ca
Thu Nov 9 09:36:15 CST 2006


Tegan Dowling wrote:
> On 11/9/06, Sandy <pmwiki at onebit.ca> wrote:
>> Patrick R. Michaud <pmichaud <at> pobox.com> writes:
>>
>>> As written, the CommentBoxPlus recipe appears to be insecure -- it
>>> basically allows content to be written to any page, including password
>>> protected pages.
>>>
>>> Pm
>>>
>> Any progress on this, or can someone recommend another method? A spammer has
>> found me. :-(
> 
> Maybe read-protect the pages?

Entire site is read-protected. The recipe bypasses the normal 
password-checking. I even deleted the page (moved the real comment 
elsewhere), and the spammer re-created the page.

Sandy





More information about the pmwiki-users mailing list