[xwiki-devs] Vandal-proofing features?
Hello, What's the current status with: 1) Captcha support on registration? 2) Captcha support on anonymous comments? (And by captcha I mean something more complicated than "what's 2 + 2?") 3) Sending e-mails with "thanks for registering, click link-here to activate your account"? 4) Ability to set a SMTP server which requires username+password? Please, there are many systems where an open smtp, even on localhost, simply can't / won't be allowed. 5) Ability to delete all comments from a specific user? 6) ... specific IP? 7) ... specific IP range? 8) ... all anonymous comments from a page? I saw "xwiki.plugin.captcha=" option in xwiki.cfg but it doesn't seem to do anything? I really can't see how XWiki can be run in "public mode" without all or most of the above :/ , preferably enabled out-of-the-box. Greetings, Lilianne
Hi, Lilianne E. Blaze wrote:
Hello, What's the current status with:
1) Captcha support on registration? Right now this is supported with jcaptcha 1.0, but not out of the box and not well documented.
2) Captcha support on anonymous comments?
AFAIK it cannot work yet without patching the struts action for submitting comments I plan to spend time in a near future to integrate 1) and 2) with JCaptcha 2.0 (http://forge.octo.com/jcaptcha/confluence/display/general/Simple+Servlet+Int...) and make it configurable from the administration UI. No hard deadline thought, this is not in XE's published roadmap (http://enterprise.xwiki.org/xwiki/bin/view/Main/Roadmap)
(And by captcha I mean something more complicated than "what's 2 + 2?")
3) Sending e-mails with "thanks for registering, click link-here to activate your account"?
4) Ability to set a SMTP server which requires username+password? Please, there are many systems where an open smtp, even on localhost, simply can't / won't be allowed.
5) Ability to delete all comments from a specific user?
That's easily scriptable, something like : #foreach($docName in $xwiki.searchDocuments(", BaseObject as comment, StringProperty as author where comment.name=doc.fullName and comment.className='XWiki.XWikiComments' and author.id.id=comment.id and author.id.name='author' and author.value='XWiki.Spammer'")) #set($spammedDoc = $xwiki.getDocument($docName)) #foreach($spam in $spammedDoc.getObjects("XWiki.XWikiComments","author","XWiki.Spammer")) $spammedDoc.removeObject($spam) #end $spammedDoc.save() #end Should do it. Not tested though, if you test it successfully please add it as a code snippet on http://code.xwiki.org/ Thanks, Jerome
6) ... specific IP?
7) ... specific IP range?
8) ... all anonymous comments from a page?
I saw "xwiki.plugin.captcha=" option in xwiki.cfg but it doesn't seem to do anything?
I really can't see how XWiki can be run in "public mode" without all or most of the above :/ , preferably enabled out-of-the-box.
Greetings, Lilianne
_______________________________________________ devs mailing list devs@xwiki.org http://lists.xwiki.org/mailman/listinfo/devs
On Mar 11, 2009, at 1:00 PM, Jerome Velociter wrote:
Hi,
Lilianne E. Blaze wrote:
Hello, What's the current status with:
1) Captcha support on registration? Right now this is supported with jcaptcha 1.0, but not out of the box and not well documented.
2) Captcha support on anonymous comments?
AFAIK it cannot work yet without patching the struts action for submitting comments
I plan to spend time in a near future to integrate 1) and 2) with JCaptcha 2.0 (http://forge.octo.com/jcaptcha/confluence/display/general/Simple+Servlet+Int... ) and make it configurable from the administration UI. No hard deadline thought, this is not in XE's published roadmap (http://enterprise.xwiki.org/xwiki/bin/view/Main/Roadmap)
Note that I also need to blog on how to integrate intense debate for public sites as I did for http://massol.net -Vincent
(And by captcha I mean something more complicated than "what's 2 + 2?")
3) Sending e-mails with "thanks for registering, click link-here to activate your account"?
4) Ability to set a SMTP server which requires username+password? Please, there are many systems where an open smtp, even on localhost, simply can't / won't be allowed.
5) Ability to delete all comments from a specific user?
That's easily scriptable, something like :
#foreach($docName in $xwiki.searchDocuments(", BaseObject as comment, StringProperty as author where comment.name=doc.fullName and comment.className='XWiki.XWikiComments' and author.id.id=comment.id and author.id.name='author' and author.value='XWiki.Spammer'")) #set($spammedDoc = $xwiki.getDocument($docName)) #foreach($spam in $ spammedDoc.getObjects("XWiki.XWikiComments","author","XWiki.Spammer")) $spammedDoc.removeObject($spam) #end $spammedDoc.save() #end
Should do it. Not tested though, if you test it successfully please add it as a code snippet on http://code.xwiki.org/
Thanks, Jerome
6) ... specific IP?
7) ... specific IP range?
8) ... all anonymous comments from a page?
I saw "xwiki.plugin.captcha=" option in xwiki.cfg but it doesn't seem to do anything?
I really can't see how XWiki can be run in "public mode" without all or most of the above :/ , preferably enabled out-of-the-box.
Greetings, Lilianne
participants (3)
-
Jerome Velociter -
Lilianne E. Blaze -
Vincent Massol