[pmwiki-users] my site is being defaced by comments
sandy at onebit.ca
Thu Nov 9 09:36:15 CST 2006
Tegan Dowling wrote:
> On 11/9/06, Sandy <pmwiki at onebit.ca> wrote:
>> Patrick R. Michaud <pmichaud <at> pobox.com> writes:
>>> As written, the CommentBoxPlus recipe appears to be insecure -- it
>>> basically allows content to be written to any page, including password
>>> protected pages.
>> Any progress on this, or can someone recommend another method? A spammer has
>> found me. :-(
> Maybe read-protect the pages?
Entire site is read-protected. The recipe bypasses the normal
password-checking. I even deleted the page (moved the real comment
elsewhere), and the spammer re-created the page.
More information about the pmwiki-users