Lilianne E. Blaze wrote:
Please, take the issue a bit more seriously. As it is, there's no way to take a standard XWiki and make it spam-proof. Things like flexible validation mails, captchas, bad words filters, spam ip filters, they should be given very high priority, and they should work out-of-the-box, not treated as fluff. It's 2009, spammers, scammers, hackers, script kiddies everywhere.
Put yourself in noob's shoes for a minute, try to set up a public-edit wiki as a typical Joe "I just want it to work" User would, you'd be ears-deep in spam as soon as it hit the google index.
And don't think mail auth has nothing to do with it - I'm willing to bet half a year's income that if you randomly choose 10 hosting providers 7 of them will refuse to set up open relays, and 2 out of remaining 3 won't have any security at all.
This is why I reformulated the AntiVandalism project ( http://dev.xwiki.org/xwiki/bin/view/GoogleSummerOfCode/AntiVandalismFilter ) to address these issues (except mail server authentication), and we have quite a lot of students applying for it. I hope that Ludovic, Vincent and the other mentors will also consider it important and accept at least one of the great students that applied for it. -- Sergiu Dumitriu http://purl.org/net/sergiu/