language-translate2 filled with spambots
Open, In Progress, HighPublic4 Estimated Story Points
Actions

Assigned To

Authored By

	taavi
	Jun 7 2024, 6:24 PM

Description

https://language-translate2.wmcloud.org/index.php/Main_Page was running an open registration mediawiki instance filled with spambots until I shut it off a few moments ago. Please fix the spam problem or retire the instance.

It was also trying to send email confirmation mail from an invalid email address.

Tasks

Lock old instance
Set up new instance: https://language-translate.wmcloud.org/index.php/Main_Page
Delete old instance
Experiment with PluggableAuth with new instance.

Related Objects

Mentioned In: T359918: Lua interface for convenient access to translations in a message bundle

Event Timeline

taavi created this task.Jun 7 2024, 6:24 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 7 2024, 6:24 PM

Nikerabbit added a subscriber: KartikMistry.Jun 7 2024, 7:09 PM

PluggableAuth WSOAuth is one of the easier ways to have authenticated accounts in a Cloud VPS/Toolforge hosted MediaWiki. See https://gitlab.wikimedia.org/toolforge-repos/mwdemo/-/blob/93672952b1c94c2dec8c16af7074848906f0eb65/etc/LocalSettings.php#L137-159 for an example of how to set that up.

KartikMistry claimed this task.Jun 10 2024, 7:45 AM

KartikMistry edited projects, added Unplanned-Sprint-Work, Language-Team (Language-2024-April-June); removed Language-Team.

KartikMistry changed the task status from Open to In Progress.Jun 10 2024, 11:39 AM

KartikMistry moved this task from Quarter Backlog to In Progress on the Language-Team (Language-2024-April-June) board.

Nikerabbit triaged this task as High priority.Jun 10 2024, 12:20 PM

Nikerabbit added a project: Localization Infrastructure FY2023-24.

Nikerabbit set the point value for this task to 4.

Nikerabbit moved this task from Backlog to Support (LM) on the Localization Infrastructure FY2023-24 board.Jun 11 2024, 8:41 AM

We had $wgGroupPermissions['*']['createaccount'] = true; left at the end of the configuration which was not intended at all. I'll recreate a new instance as cleaning up spam is not possible given the large number of accounts/pages that were created.

Thanks @bd808 for the PluggableAuth, I'll be trying that at the new instance.

Nikerabbit edited projects, added LPL Essential (LPL Essential 2024 Jul-Sep); removed Language-Team (Language-2024-April-June).Jun 27 2024, 7:44 AM

Nikerabbit moved this task from Sprint Backlog to In Progress on the LPL Essential (LPL Essential 2024 Jul-Sep) board.

abi_ mentioned this in T359918: Lua interface for convenient access to translations in a message bundle.Aug 14 2024, 8:29 AM

KartikMistry updated the task description. (Show Details)Aug 20 2024, 6:29 AM

KartikMistry updated the task description. (Show Details)

KartikMistry updated the task description. (Show Details)Aug 20 2024, 1:48 PM