[pmwiki-users] Sandbox Hack -- Public Service Announcement

[Petko Yotov]

Sandy writes:
> Question: How do I lock down the sandbox? It's been a long time since I  
> activated it.

The page Main.WikiSandbox coming with the devault installation has the same  
permissions as the Main group (and most often as the wiki). If you have an  
edit password on the wiki like you mentioned, check the individual  
permissions on the spammed page(s) and/or groups. As StefCT suggested, there  
is an automatically generated list in the page SiteAdmin.AuthList.

> Also, the blocklist file is very short, even though I enabled it. Ideas? Now  
> that they've found us, I need to pay more attention to it.

You can enable automatic downloading of blocklists from pmwiki.org and  
moinmo.in, check the documentation for $EnableBlocklist = 10;

Also, the SpamFilters recipe may be of some use:

  http://www.pmwiki.org/wiki/Cookbook/SpamFilters

Good luck,
Petko