[pmwiki-users] my site is being defaced by comments

Patrick R. Michaud pmichaud at pobox.com
Mon Oct 16 11:39:16 CDT 2006


On Mon, Oct 16, 2006 at 11:56:24AM -0400, Brian wrote:
> Hello pmwiki-users,
> 
>  My site is being defaced on a daily basis by what appears to be
>  comment spam, even though its not enabled on the page. This continues
>  even after changing all my passwords. Site analyzer shows no security
>  holes. What to do ?
> 
>  The site's url is  www.norilskrussia.net

As written, the CommentBoxPlus recipe appears to be insecure -- it
basically allows content to be written to any page, including password
protected pages.

Pm




More information about the pmwiki-users mailing list