[Xastir] Wiki permissions

[Tom Russo]

On Thu, Mar 12, 2009 at 01:11:50PM -0600, we recorded a bogon-computron collision of the <ka7o at ka7o.net> flavor, containing:
> Something like this:
> 
> # Email authentication required for new users
> $wgEnableEmail      = true;
> $wgEnableUserEmail  = true;
> $wgEmailAuthentication = true;
> $wgEmailConfirmToEdit = true;
> 
> Dropped into LocalSettings.php can help a lot too. Nothing to install
> either - "it just works".

Nod.  I advocated this early on, but it's not how Chuck has it set.

> I've got 2 mediawiki instances going now - one I expect to see more
> traffic than the other. This spam prevention is critical.

Agreed.  The current set up is a bit of a hassle.  Each user who wants 
to be able to edit the wiki has to email to a sysop (currently Chuck, Curt,
or me) and be added to the "wikieditors" group.  It really does keep out
the riff-raff, but it also keeps out legit users.

> I also use this extension (LocalSettings.php bit).
> 
> # Enable ConrimEdit Extionsion
> # http://www.mediawiki.org/wiki/Extension:ConfirmEdit
> require_once( "$IP/extensions/ConfirmEdit/ConfirmEdit.php" );
> 
> Any edit/newpage that has a URL going offsite, editor has to do some
> 'math' to get it online. Slows the bots down. (yea, some seem to have
> figured out the email bit).

That is exactly what Scott uses for the info.aprs.net wiki.  There's been no
spam on that wiki since he implemented it, and there was daily trashing of the
site until he did.

-- 
Tom Russo    KM5VY   SAR502   DM64ux          http://www.swcp.com/~russo/
Tijeras, NM  QRPL#1592 K2#398  SOC#236        http://kevan.org/brain.cgi?DDTNM
  In some cultures what I do would be considered normal. 
                                  -- Ineffective daily affirmation