MediaWiki security >

Thanks to a couple of brave spammers, most MediaWiki admins are aware of the utter lack of spam protection MediaWiki has out of the box. Thanks to the “wiki philosophy” of open editing.. MediaWiki is completely open to attack by default.

However, several straightforward steps can help protect a wiki.

See also:

• .htaccess has some methods for blocking things like blank user agents or IP ranges.

• Early MediaWiki versions are designed for spamming

• MediaWiki content banning
• Bad Behavior is a set of PHP scripts which automatically blocks harvesters, spam bots, and other funky stuff.
• MediaWiki SpamBlacklist extension

• MediaWiki captcha

Resources ∞

• [[Special:Ipblocklist]]

  • See also https://en.wikipedia.org/wiki/Special:BlockList ^[ 1 ] was http://en.wikipedia.org/wiki/Special:Ipblocklist
  • I don’t know how that works, or how to import a quick list.
  • See also https://web.archive.org/web/20050310110450/http://www.rubygarden.org:80/ruby?ListOfSpammersIPs

• http://meta.wikimedia.org/wiki/Category:Anti_Spam

  • https://meta.wikimedia.org/wiki/Anti-spam_features
• https://www.mediawiki.org/wiki/Manual:FAQ#Anti-spam
• https://meta.wikimedia.org/wiki/Spam_Filter

• https://web.archive.org/web/20160806051151/http://wiki.evernex.com/index.php?title=Blocking_Spam_in_Mediawiki

• https://web.archive.org/web/20171209135302/http://spamhuntress.com/ (wiki)

Notes ∞

• Untested Hack: Remove “style” from the Allowed Attributes array in the function removeHTMLtags in OutputPage.php
• [[MediaWiki:Spamprotectiontext]]
• [[MediaWiki:Spamprotectiontitle]]