We just had another spam attack. Can you take a look?
On Thu, Dec 2, 2010 at 11:19 PM, till till@php.net wrote:
Oh, cool. Maybe we try that first.
I googled mod_security and trac and found this: http://projects.otaku42.de/wiki/ScallyWhack/Installation
Would that be an option as well?
On Thu, Dec 2, 2010 at 10:41 PM, Adam Grelck adam.grelck@gmail.com wrote:
Actually, I'm not sure it was ever in effect. I think there wasn't a readily available way to do it before, but it looks like there might be now: http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#EmailVerificationMod...
Adam
On Thu, Dec 2, 2010 at 3:35 PM, till till@php.net wrote:
Now that I look at it, I can't figure out if user registration (with email confirmation) is still mandatory. That seems to be the only thing and the accounts I deleted didn't have an email assigned.
Do you know where that setting i?
Till
On Thu, Dec 2, 2010 at 10:21 PM, Adam Grelck adam.grelck@gmail.com wrote:
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/b33d0462
List info: http://lists.roundcube.net/dev/ BT/aba52c80