Hi Andy,
On Thu, Oct 29, 2009 at 2:18 AM, Andreas Schaefer <schaefera(a)me.com> wrote:
  Hi
 I just realized that I have a bunch of new users all created with the
 same first and last name. I saw one with the same name 'Kunstkamera'
 being created also on the 
XWiki.org (or at least I thought so).
 Any idea what is going on.
 
Is there someone trying to spam XWiki's and is there anything to be of
  concern as an administrator?
 
Yes, this is XWiki getting spammed. The safest thing to do is to deny the
Register & Comment rights to Unregistered Users or setup the email
confirmation.
We need to implement CAPTCHAs to prevent this but we haven't had the time to
do it in the latest releases.
Which leads me to another concern:
        Every Import of the Enterprise XAR file is reseting the Admin
 password to the default.
        Is there anyway to prevent that because in the heat of the upgrade
 procedure that gets easily overlooked ?
 
Don't import the Admin User ;-)
Jérôme is working on a patch where imported files will simply create a new
version instead of completely replacing the existing page, once it's applied
(hopefully by 2.1 M1) you'll be able to rollback to the previous version of
the page to get the old password.
Guillaume
Cheers - Andy
 _______________________________________________
 users mailing list
 users(a)xwiki.org
 
http://lists.xwiki.org/mailman/listinfo/users
 
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/