[Labs-l] Ensure your MediaWiki install is either locked-down or properly patrolled

Wed Oct 3 17:15:41 UTC 2012

On Wed, Oct 3, 2012 at 7:49 AM, Andrew Bogott <abogott at wikimedia.org> wrote:
> On 10/2/12 7:46 PM, Ryan Lane wrote:
>>
>> We've had some issues with really bad vandalism on some public
>> instances that have MediaWiki installed in such a way that allows
>> anonymous editing.
>
> I've recently modified role::mediawiki-install::labs to automatically
> install the Nuke, SpamBlacklist and ConfirmEdit extensions.  I welcome
> suggestions about other anti-vandalism defaults that I should add to the
> standard config.
>

We should likely default MediaWiki installs to require login to edit,
and restrict account creation by default:

# Only sysops can create new accounts.
$wgGroupPermissions['*']['createaccount'] = false;

# Anons can't edit
$wgGroupPermissions['*']['edit'] = false;

- Ryan