29 Oct
2009
29 Oct
'09
12:49 p.m.
Hi Andy,
On Thu, Oct 29, 2009 at 2:18 AM, Andreas Schaefer <schaefera(a)me.com> wrote:
Hi
I just realized that I have a bunch of new users all created with the
same first and last name. I saw one with the same name 'Kunstkamera'
being created also on the XWiki.org (or at least I thought so).
Any idea what is going on.
Is there someone trying to spam XWiki's and is there anything to be of
concern as an administrator?
Yes, this is XWiki getting spammed. The safest thing to do is to deny the
Register & Comment rights to Unregistered Users or setup the email
confirmation.
We need to implement CAPTCHAs to prevent this but we haven't had the time to
do it in the latest releases.
Which leads me to another concern:
Every Import of the Enterprise XAR file is reseting the Admin
password to the default.
Is there anyway to prevent that because in the heat of the upgrade
procedure that gets easily overlooked ?
Don't import the Admin User ;-)
Jérôme is working on a patch where imported files will simply create a new
version instead of completely replacing the existing page, once it's applied
(hopefully by 2.1 M1) you'll be able to rollback to the previous version of
the page to get the old password.
Guillaume
Cheers - Andy
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/