Re: CAPTCHA for the relax wiki.Re: CAPTCHA for the relax wiki.So, I now changed how CAPTCHA method for how users are created. A mix of acronyms and NMR images which have to be answered. When a user is created, they still have no rights. If they confirm their email address, they are auto promoted to the group Emailconfirmed, and now have basic rights to create page, and edit them. As explained here: http://wiki.nmr-relax.com/How_to_edit_pages_at_the_wiki There is now no CAPTCHA needed for the creation/editing of a page. For a wider range of rights, admins can upgrade users to the "Trusted" group, via http://wiki.nmr-relax.com/Special:UserRights See the rights here: http://wiki.nmr-relax.com/Special:ListGroupRights Troels Emtekær Linnet 2013/8/12 Troels Emtekær Linnet <tlinnet@xxxxxxxxx>:
Jesus, how annoying. I will implement the Extension:QuestyCaptcha later today. Best Troels Troels Emtekær Linnet 2013/8/12 Edward d'Auvergne <edward@xxxxxxxxxxxxx>Hi Troels, The reCAPTCHA from Google is clearly not working - I just deleted a ton of bots and the junk pages they created. I think we should consider different options for the relax wiki. For example we can have some basic NMR questions through QuestyCaptcha: http://www.mediawiki.org/wiki/Extension:QuestyCaptcha I.e. questions or statements such as, "Please expand the acronym NMR" and maybe "Please expand the acronym FID". Another tough question for bots might be, "Please list a maker of NMR magnets". These should be easier enough for NMR users while blocking the bots. What do you think? We could just constantly change between basic NMR questions if a bot herder manually breaks the Captcha by using Google and storing the answer - which we will easily see once the junk comes through again. If the bots become too overwhelming, then we can resort to: http://www.mediawiki.org/wiki/Extension%3aConfirmAccount Regards, Edward On 9 August 2013 12:33, Edward d'Auvergne <edward@xxxxxxxxxxxxx> wrote:Ah, that's how it's done. Cheers! Edward On 9 August 2013 12:16, Troels Emtekær Linnet <tlinnet@xxxxxxxxx> wrote:Hi Edward. You find all "special pages" in the left menu, under toolbox: http://wiki.nmr-relax.com/Special:SpecialPages Depending on your login-credentials, you will see different special page options. You would probably use: User list - http://wiki.nmr-relax.com/Special:ListUsers Merge and delete users - http://wiki.nmr-relax.com/Special:UserMerge Old user (merge from): The user name of the spammer New user (merge to): Spam bot Best Troels Emtekær Linnet 2013/8/9 Edward d'Auvergne <edward@xxxxxxxxxxxxx>Hi, No problems, I'll keep watching and see what happens. I've had quite some experience cleaning up after spam bots, as they attacked the relax news system at https://gna.org/news/?group=relax. As for the CAPTCHA for setting up a new account, I checked yesterday and there was none. Today it's working though. We just have to keep watching and see what happens. Maybe a better CAPTCHA is required if they can still come through. One question though, how do I use the merge and delete extension? Cheers, Edward On 9 August 2013 11:18, Troels Emtekær Linnet <tlinnet@xxxxxxxxx> wrote:Hi Edward. Damn does bots. Thanks for taking care! 1) I have increased the security, so you need to have link-click confirmed your email, before you can edit. 2) I have also made it necessary to do CAPTCHA input, before each submission of a page edit. 3) I installed a Merge and delete users extension for admins. I have created a user: Spam bot And merged and deleted all dubious users into that user user. (Note, total deletion on wiki's is "normally" not possible). I hope this helps a little. I am stunned, that the bots can be created at all. ? You need to pass CAPTCHA, to be able to create a user. ? Troels Emtekær Linnet 2013/8/9 Edward d'Auvergne <edward@xxxxxxxxxxxxx>Hi Troels, I really think we need to set up a CAPTCHA (http://www.mediawiki.org/wiki/CAPTCHA) for the user creation on the relax wiki (http://wiki.nmr-relax.com). Maybe for new page creation as well. The wiki has been infested with bots and I have been deleting these accounts and all the pages they created: http://wiki.nmr-relax.com/index.php?title=Special:ListUsers&offset=&limit=500 http://wiki.nmr-relax.com/index.php?title=Special:Log/delete&offset=&limit=500&type=delete&user= There's no rush as it's still relatively each to whack these bots. Regards, Edward