[GRASS-user] Cannot get past Wiki captcha

Hi list,

I am logged into the wiki and trying to save some
edits to this page:

http://grass.osgeo.org/grass-
wiki/index.php?title=GRASS_7_ideas_collection

Since I have included links to external web pages,
I am presented with a captcha. I solve the captcha,
hit enter and get presented with another captcha,
over and over again. Simply cannot get passed it.

I am on Firefox 7.0.1 with cookies enabled.

Any ideas what might be the problem?

Thanks,

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

Hi,

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:

I am logged into the wiki and trying to save some
edits to this page:

http://grass.osgeo.org/grass-
wiki/index.php?title=GRASS_7_ideas_collection

Since I have included links to external web pages,
I am presented with a captcha. I solve the captcha,
hit enter and get presented with another captcha,
over and over again. Simply cannot get passed it.

I am on Firefox 7.0.1 with cookies enabled.

strange, captcha are enable only when creating new account, they are
no required when editing wiki pages. Anyway I can edit wiki pages
without any problem, is there anyone having similar problems?

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

I just tried from a different machine, different
internet connection, Firefox 4, still the same
problem.

The captcha help text says these appear because
I have new links to external URLs in the text
(spam protection).

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

On Wednesday, November 16, 2011 10:55 AM, "Martin Landa"
<landa.martin@gmail.com> wrote:

Hi,

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:
> I am logged into the wiki and trying to save some
> edits to this page:
>
> http://grass.osgeo.org/grass-
> wiki/index.php?title=GRASS_7_ideas_collection
>
> Since I have included links to external web pages,
> I am presented with a captcha. I solve the captcha,
> hit enter and get presented with another captcha,
> over and over again. Simply cannot get passed it.
>
> I am on Firefox 7.0.1 with cookies enabled.

strange, captcha are enable only when creating new account, they are
no required when editing wiki pages. Anyway I can edit wiki pages
without any problem, is there anyone having similar problems?

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:

I just tried from a different machine, different
internet connection, Firefox 4, still the same
problem.

The captcha help text says these appear because
I have new links to external URLs in the text
(spam protection).

Something like

http://grass.osgeo.org/grass-wiki/index.php?title=Sandbox&action=historysubmit&diff=14396&oldid=13386

?

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

Similar. I tried to embed URLs

[http://myurl.org like this]

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

On Wednesday, November 16, 2011 11:19 AM, "Martin Landa"
<landa.martin@gmail.com> wrote:

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:
> I just tried from a different machine, different
> internet connection, Firefox 4, still the same
> problem.
>
> The captcha help text says these appear because
> I have new links to external URLs in the text
> (spam protection).

Something like

http://grass.osgeo.org/grass-wiki/index.php?title=Sandbox&action=historysubmit&diff=14396&oldid=13386

?

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:

Similar. I tried to embed URLs

[http://myurl.org like this]

as I sad before captcha shouldn't be enabled for editing. I cannot
reproduce this behaviour. Could some try it too? Eg. in

http://grass.osgeo.org/wiki/Sandbox

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

OK, I have posted the text without the URLs for now.
That worked without problems.

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

On Wednesday, November 16, 2011 11:45 AM, "Martin Landa"
<landa.martin@gmail.com> wrote:

2011/11/16 Benjamin Ducke <benducke@fastmail.fm>:
> Similar. I tried to embed URLs
>
> [http://myurl.org like this]

as I sad before captcha shouldn't be enabled for editing. I cannot
reproduce this behaviour. Could some try it too? Eg. in

http://grass.osgeo.org/wiki/Sandbox

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

Martin Landa wrote:

> Similar. I tried to embed URLs
>
> [http://myurl.org like this]

as I sad before captcha shouldn't be enabled for editing. I cannot
reproduce this behaviour.

A common set-up for wikis is to require a captcha for edits which
trigger spam detection, e.g. the edit contains more than a certain
number of URLs. If the spam detection takes the user's editing history
into account, it's quite possible that it will trigger for one user
but not another.

--
Glynn Clements <glynn@gclements.plus.com>

Benjamin Ducke <benducke@fastmail.fm>:

> Similar. I tried to embed URLs
>
> [http://myurl.org like this]

as I sad before captcha shouldn't be enabled for
editing.

for URLs outside of osgeo.org (& osgeo.osuosl.org?)
it must have a captcha to stop the spammers.
As Glynn noted, there is something built into WikMed
which makes it not necessary for someone who has
made many edits over a long period of time. (ie
it auto-trusts folks after $effort without sysop
complaint)

@Ben: perhaps you are running "NoScript" or similar
without the proper exemptions and that's blocking
the "all ok" return signal?

Hamish

@Ben: perhaps you are running "NoScript" or similar
without the proper exemptions and that's blocking
the "all ok" return signal?

Hamish

I tried on two different versions of plain Firefox,
and made sure that cookies were enabled. I cannot
see anything that could get in the way. But no luck,
unfortunately. Maybe at some point another user will
run into the same problem and then we might be able
to see a pattern. Right now, I am clueless about this.

It's the first time I am being refused by a wiki --
traumatic.

Ben

I can conform this issue. I was using Chromium 16.0.912.36
I can enter any text I like and still I will be greeted with a new image.

Unless somebody can take a look at server side, we can't help anymore.

Maris.

POST data (xxx'ed some parts):

Request URL:http://grass.osgeo.org/grass-wiki/index.php?title=User:MarisN&action=submit
Request Method:POST
Status Code:200 OK
Request Headersview source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset:windows-1257,utf-8;q=0.7,*;q=0.3
Accept-Encoding:gzip,deflate,sdch
Accept-Language:lv,en-US;q=0.8,en;q=0.6,pl;q=0.4
Cache-Control:no-cache
Connection:keep-alive
Content-Length:1676
Content-Type:multipart/form-data;
boundary=----WebKitFormBoundaryS2AI45kVs0nsnx3D
Cookie:doxygen_width=300;
grass_wiki_session=449997b7357d540808a9bdd9cbe6xxxx;
grass_wikiUserID=14x; grass_wikiUserName=MarisN
Host:grass.osgeo.org
Origin:http://grass.osgeo.org
Pragma:no-cache
Referer:http://grass.osgeo.org/grass-wiki/index.php?title=User:MarisN&action=submit
User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.7 (KHTML,
like Gecko) Chrome/16.0.912.36 Safari/535.7
Query String Parametersview URL encoded
title:User:MarisN
action:submit
Request Payload
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpCaptchaId"

880822787
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpCaptchaWord"

alpobeck
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpSection"

------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpStarttime"

20111118103525
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpEdittime"

20110326090024
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpScrolltop"

0
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpAutoSummary"

d41d8cd98f00b204e9800998ecf8xxxx
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="oldid"

0
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpTextbox1"

Māris Nartišs

Author of r.lake, v.profile modules and a troll. Intolerant, hard to
communicate person.

Lecturer at University of Latvia.

[http://www.gisnet.lv/ About GIS in Latvian]

If You need a help with GIS in Latvia - [http://www.sungis.lv/ SunGIS ltd]

Will code for food.

------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpSummary"

Adding a link to SunGIS to test captcha problems.
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpSave"

Save page
------WebKitFormBoundaryS2AI45kVs0nsnx3D
Content-Disposition: form-data; name="wpEditToken"

21b05d93ecfda9d07087f2096b26fxxxxx
------WebKitFormBoundaryS2AI45kVs0nsnx3D--
Response Headersview source
Cache-Control:private, must-revalidate, max-age=0
Connection:close
Content-Encoding:gzip
Content-Type:text/html; charset=utf-8
Content-language:en
Date:Fri, 18 Nov 2011 10:44:09 GMT
Expires:Thu, 01 Jan 1970 00:00:00 GMT
Server:Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch
mod_python/3.3.1 Python/2.5.2 mod_wsgi/2.5
Transfer-Encoding:chunked
Vary:Accept-Encoding,Cookie
X-Frame-Options:DENY
X-Powered-By:PHP/5.2.6-1+lenny13

2011/11/18 Benjamin Ducke <benducke@fastmail.fm>:

@Ben: perhaps you are running "NoScript" or similar
without the proper exemptions and that's blocking
the "all ok" return signal?

Hamish

I tried on two different versions of plain Firefox,
and made sure that cookies were enabled. I cannot
see anything that could get in the way. But no luck,
unfortunately. Maybe at some point another user will
run into the same problem and then we might be able
to see a pattern. Right now, I am clueless about this.

It's the first time I am being refused by a wiki --
traumatic.

Ben
_______________________________________________
grass-user mailing list
grass-user@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/grass-user

fwiw, I just tried editing
  http://wiki.osgeo.org/wiki/Sandbox

and that did ask me to pass a captcha for the external
URLs added, and it worked.

does it work for you there?

it is not the same instance of MediaWiki, but at least
we can play spot-the-difference in the setups.

Hamish

Yes it does, so I guess the problem may be
the GRASS MediaWiki configuration/version.

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

On Friday, November 18, 2011 9:23 PM, "Hamish" <hamish_b@yahoo.com>
wrote:

fwiw, I just tried editing
  http://wiki.osgeo.org/wiki/Sandbox

and that did ask me to pass a captcha for the external
URLs added, and it worked.

does it work for you there?

it is not the same instance of MediaWiki, but at least
we can play spot-the-difference in the setups.

Hamish

Thanks for looking into this, Martin.
Let's hope deactivating the captcha will have
no bad consequence in the form of spamming.

Cheers,

Ben

--
Benjamin Ducke
{*} Geospatial Consultant
{*} GIS Developer
  
  benducke@fastmail.fm

On Sunday, November 20, 2011 3:16 PM, "Martin Landa"
<landa.martin@gmail.com> wrote:

Hi,

2011/11/20 Benjamin Ducke <benducke@fastmail.fm>:
> Yes it does, so I guess the problem may be
> the GRASS MediaWiki configuration/version.

unfortunately I cannot reproduce this problem (anyone here with
similar problem)? We are using recent version of Mediawiki [1] 1.17.0.
I have changed

$wgCaptchaTriggers['addurl'] = true;

to

$wgCaptchaTriggers['addurl'] = false;

It should help, Martin

[1] http://grass.osgeo.org/wiki/Special:Version

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

Benjamin wrote:

Let's hope deactivating the captcha will have
no bad consequence in the form of spamming.

unfortunately, from past experience I can pretty much guarantee
that it will.

Hamish

2011/11/22 Hamish <hamish_b@yahoo.com>:

Benjamin wrote:

Let's hope deactivating the captcha will have
no bad consequence in the form of spamming.

unfortunately, from past experience I can pretty much guarantee
that it will.

I think that the main issue is that captcha is enabled when creating
new account. Let's see what will happen.

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

> Benjamin wrote:
>> Let's hope deactivating the captcha will have
>> no bad consequence in the form of spamming.

Hamish:

> unfortunately, from past experience I can pretty much
> guarantee that it will.

Martin:

I think that the main issue is that captcha is enabled when
creating new account. Let's see what will happen.

I've been through this on a number of wikis external to grass,
email + captcha protected account generation and all. all those
hours of cleanup I will never get back, and for me that wasted
time is a huge motivation killer.

why aren't we using the stock debian version of mediawiki, which
is known to work and tested by many thousands using the same
config? (yay pkg-stable software versions and the debian bug
tracker knowledge base)

related// are there any plans to link with the core OSGeo LDAP
login, so that people don't need multiple accounts?

thanks,
Hamish

2011/11/22 Hamish <hamish_b@yahoo.com>:

[...]

related// are there any plans to link with the core OSGeo LDAP
login, so that people don't need multiple accounts?

ASAIK no, feel free to work on that.

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

2011/11/22 Hamish <hamish_b@yahoo.com>:

I think that the main issue is that captcha is enabled when
creating new account. Let's see what will happen.

I've been through this on a number of wikis external to grass,
email + captcha protected account generation and all. all those
hours of cleanup I will never get back, and for me that wasted
time is a huge motivation killer.

please note that captcha has been disabled for GRASS Wiki for quite a
long time and most of cleanup has been done MarkusN and me. So
probably I know what you are speaking about;-)

Martin

--
Martin Landa <landa.martin gmail.com> * http://geo.fsv.cvut.cz/~landa

Martin:

long time and most of cleanup has been done MarkusN and me.

no doubt.

fwiw, if you check the block logs I think you will find that you
are not alone in that.. (a while ago I did some 100+)

why aren't we using the standard and very well tested debian
package for mediawiki?

thanks,
Hamish