You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jspwiki.apache.org by Xiaoming Yang <xi...@ctsu.ox.ac.uk> on 2015/06/09 22:56:15 UTC
CAPTCHA
Hi, All,
One of the features that attracts me to JSPWiki is its security. I am currently looking at captcha. I have spent hours on searching web and couldn't find a useful tip. It seems related to org.apache.wiki.filters.SpamFilter, but how I should configure it. Do I need to get a 3rd party 'asirra' jar? If so, wher can I get one? Can anyone tell me how, e.g. some guide/doc/example for turning it on or set it up? Thanks.
Regards,
Xiaoming
RE: CAPTCHA
Posted by Xiaoming Yang <xi...@ctsu.ox.ac.uk>.
Hi, Juan,
Thanks for your tip. Yes, I am convinced that the SpamFilter is in action now. I have put 7 different URLs in a page, and I got following message:
//---------------------
We believe you may be a robot or a spammer. Could you please pick out the kittens from the below set of images, so we know you are a normal human being?
---------------------//
However, there is no image at all below above sentence. Do I need to put the image manually somewhere during JSPWiki setup?
Regards,
Xiaoming
________________________________________
From: Juan Pablo Santos Rodríguez [juanpablo.santos@gmail.com]
Sent: 10 June 2015 20:03
To: user@jspwiki.apache.org
Subject: Re: CAPTCHA
Hi,
the spam filter redirects to the captcha challenge when it suspects you're
a spamemer. Given that the rest of the filter parameters' stay with their
default values, the easier way to make it pop up would be saving a page
more than 5 times in less than a minute or saving a text with more than 5
URLs in it.
HTH,
juan pablo
On Wed, Jun 10, 2015 at 6:09 PM, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
wrote:
> Hi Juan,
>
> I have put following into filters.xml
>
> //----------
>
> <?xml version="1.0"?>
> <pagefilters>
> <filter>
> <class>org.apache.wiki.filters.SpamFilter</class>
> <param>
> <name>captcha</name>
> <value>asirra</value>
> </param>
> </filter>
> </pagefilters>
>
> ----------------//
>
> and I can see following in the SystemInfo page:
>
> //------------
>
> Installed PageFilters | org.apache.wiki.filters.SpamFilter
>
> --------------//
>
> I have tried editing/saving a page. No Captcha challenges me. How should I
> enable it in a page level? What steps I missed?
>
> Regards,
> Xiaoming
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> Sent: 10 June 2015 13:40
> To: user@jspwiki.apache.org
> Subject: Re: CAPTCHA
>
> Hi,
>
> being a filter, it is used on page level. If you wish to approve manually
> account creation (or page saving), you should go with workflows [#1]. On a
> quick thought, other options could include forbidding account creation, or
> delegating authorization to the container or going with your own workflow..
>
> Regarding the captcha parameter, if it is set to none, upon spam detection
> you're redirected to the error page; if it's set to asirra you're
> redirected to the Captcha.jsp page which tries to determine if you're a
> human using the Asirra service [#2].
>
>
> regards,
> juan pablo
>
> [#1]:
>
> https://jspwiki-wiki.apache.org/Wiki.jsp?page=Configuration#section-Configuration-WorkflowConfiguration
> [#2]: http://research.microsoft.com/en-us/um/redmond/projects/asirra/
>
> On Wed, Jun 10, 2015 at 1:25 PM, Xiaoming Yang <
> xiaoming.yang@ctsu.ox.ac.uk>
> wrote:
>
> > Thanks, Juan,
> >
> > On the Javadoc [#2], there is following paramether:
> >
> > captcha - Sets the captcha technology to use. Current allowed values
> > are "none" and "asirra".
> >
> > Is this a feature having already implemented? If so, where can I find
> > more details on how to use captcha? Is it used during user login, or
> > account creating, or is it used on page level?
> >
> > Regards,
> > Xiaoming
> >
> > -----Original Message-----
> > From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> > Sent: 10 June 2015 11:05
> > To: user@jspwiki.apache.org
> > Subject: Re: CAPTCHA
> >
> > Hi,
> >
> > indeed, the Spam Filter is the place to go. To see how to set it up
> > see [#1], in this case starting on step 2, as the filter is already on
> > classpath. To see its parameters the best place is the javadoc [#2].
> >
> >
> > HTH,
> > juan pablo
> >
> >
> > [#1]:
> > https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configurati
> > on
> > [#2]:
> >
> > http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamF
> > ilter.html
> >
> > On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com>
> wrote:
> >
> > > I too would be interested in CAPTCHA. I wrote my own engine for
> > > another website and it's fairly easy. I could do with it
> > > integrating into JSPWiki as my site has just been attacked by spam
> > > bots posting huge amounts into the comments, actually causing Java
> > > Out of Memory
> > errors...
> > >
> > > On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> > > wrote:
> > >
> > > > Hi, All,
> > > >
> > > > One of the features that attracts me to JSPWiki is its security. I
> > > > am currently looking at captcha. I have spent hours on searching
> > > > web and couldn't find a useful tip. It seems related to
> > > > org.apache.wiki.filters.SpamFilter, but how I should configure it.
> > > > Do I need to get a 3rd party 'asirra' jar? If so, wher can I get
> > > > one? Can
> > > anyone
> > > > tell me how, e.g. some guide/doc/example for turning it on or set
> > > > it
> > up?
> > > > Thanks.
> > > >
> > > > Regards,
> > > >
> > > > Xiaoming
> > > >
> > >
> >
>
Re: CAPTCHA
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi,
the spam filter redirects to the captcha challenge when it suspects you're
a spamemer. Given that the rest of the filter parameters' stay with their
default values, the easier way to make it pop up would be saving a page
more than 5 times in less than a minute or saving a text with more than 5
URLs in it.
HTH,
juan pablo
On Wed, Jun 10, 2015 at 6:09 PM, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
wrote:
> Hi Juan,
>
> I have put following into filters.xml
>
> //----------
>
> <?xml version="1.0"?>
> <pagefilters>
> <filter>
> <class>org.apache.wiki.filters.SpamFilter</class>
> <param>
> <name>captcha</name>
> <value>asirra</value>
> </param>
> </filter>
> </pagefilters>
>
> ----------------//
>
> and I can see following in the SystemInfo page:
>
> //------------
>
> Installed PageFilters | org.apache.wiki.filters.SpamFilter
>
> --------------//
>
> I have tried editing/saving a page. No Captcha challenges me. How should I
> enable it in a page level? What steps I missed?
>
> Regards,
> Xiaoming
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> Sent: 10 June 2015 13:40
> To: user@jspwiki.apache.org
> Subject: Re: CAPTCHA
>
> Hi,
>
> being a filter, it is used on page level. If you wish to approve manually
> account creation (or page saving), you should go with workflows [#1]. On a
> quick thought, other options could include forbidding account creation, or
> delegating authorization to the container or going with your own workflow..
>
> Regarding the captcha parameter, if it is set to none, upon spam detection
> you're redirected to the error page; if it's set to asirra you're
> redirected to the Captcha.jsp page which tries to determine if you're a
> human using the Asirra service [#2].
>
>
> regards,
> juan pablo
>
> [#1]:
>
> https://jspwiki-wiki.apache.org/Wiki.jsp?page=Configuration#section-Configuration-WorkflowConfiguration
> [#2]: http://research.microsoft.com/en-us/um/redmond/projects/asirra/
>
> On Wed, Jun 10, 2015 at 1:25 PM, Xiaoming Yang <
> xiaoming.yang@ctsu.ox.ac.uk>
> wrote:
>
> > Thanks, Juan,
> >
> > On the Javadoc [#2], there is following paramether:
> >
> > captcha - Sets the captcha technology to use. Current allowed values
> > are "none" and "asirra".
> >
> > Is this a feature having already implemented? If so, where can I find
> > more details on how to use captcha? Is it used during user login, or
> > account creating, or is it used on page level?
> >
> > Regards,
> > Xiaoming
> >
> > -----Original Message-----
> > From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> > Sent: 10 June 2015 11:05
> > To: user@jspwiki.apache.org
> > Subject: Re: CAPTCHA
> >
> > Hi,
> >
> > indeed, the Spam Filter is the place to go. To see how to set it up
> > see [#1], in this case starting on step 2, as the filter is already on
> > classpath. To see its parameters the best place is the javadoc [#2].
> >
> >
> > HTH,
> > juan pablo
> >
> >
> > [#1]:
> > https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configurati
> > on
> > [#2]:
> >
> > http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamF
> > ilter.html
> >
> > On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com>
> wrote:
> >
> > > I too would be interested in CAPTCHA. I wrote my own engine for
> > > another website and it's fairly easy. I could do with it
> > > integrating into JSPWiki as my site has just been attacked by spam
> > > bots posting huge amounts into the comments, actually causing Java
> > > Out of Memory
> > errors...
> > >
> > > On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> > > wrote:
> > >
> > > > Hi, All,
> > > >
> > > > One of the features that attracts me to JSPWiki is its security. I
> > > > am currently looking at captcha. I have spent hours on searching
> > > > web and couldn't find a useful tip. It seems related to
> > > > org.apache.wiki.filters.SpamFilter, but how I should configure it.
> > > > Do I need to get a 3rd party 'asirra' jar? If so, wher can I get
> > > > one? Can
> > > anyone
> > > > tell me how, e.g. some guide/doc/example for turning it on or set
> > > > it
> > up?
> > > > Thanks.
> > > >
> > > > Regards,
> > > >
> > > > Xiaoming
> > > >
> > >
> >
>
RE: CAPTCHA
Posted by Xiaoming Yang <xi...@ctsu.ox.ac.uk>.
Hi Juan,
I have put following into filters.xml
//----------
<?xml version="1.0"?>
<pagefilters>
<filter>
<class>org.apache.wiki.filters.SpamFilter</class>
<param>
<name>captcha</name>
<value>asirra</value>
</param>
</filter>
</pagefilters>
----------------//
and I can see following in the SystemInfo page:
//------------
Installed PageFilters | org.apache.wiki.filters.SpamFilter
--------------//
I have tried editing/saving a page. No Captcha challenges me. How should I enable it in a page level? What steps I missed?
Regards,
Xiaoming
-----Original Message-----
From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
Sent: 10 June 2015 13:40
To: user@jspwiki.apache.org
Subject: Re: CAPTCHA
Hi,
being a filter, it is used on page level. If you wish to approve manually account creation (or page saving), you should go with workflows [#1]. On a quick thought, other options could include forbidding account creation, or delegating authorization to the container or going with your own workflow..
Regarding the captcha parameter, if it is set to none, upon spam detection you're redirected to the error page; if it's set to asirra you're redirected to the Captcha.jsp page which tries to determine if you're a human using the Asirra service [#2].
regards,
juan pablo
[#1]:
https://jspwiki-wiki.apache.org/Wiki.jsp?page=Configuration#section-Configuration-WorkflowConfiguration
[#2]: http://research.microsoft.com/en-us/um/redmond/projects/asirra/
On Wed, Jun 10, 2015 at 1:25 PM, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
wrote:
> Thanks, Juan,
>
> On the Javadoc [#2], there is following paramether:
>
> captcha - Sets the captcha technology to use. Current allowed values
> are "none" and "asirra".
>
> Is this a feature having already implemented? If so, where can I find
> more details on how to use captcha? Is it used during user login, or
> account creating, or is it used on page level?
>
> Regards,
> Xiaoming
>
> -----Original Message-----
> From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> Sent: 10 June 2015 11:05
> To: user@jspwiki.apache.org
> Subject: Re: CAPTCHA
>
> Hi,
>
> indeed, the Spam Filter is the place to go. To see how to set it up
> see [#1], in this case starting on step 2, as the filter is already on
> classpath. To see its parameters the best place is the javadoc [#2].
>
>
> HTH,
> juan pablo
>
>
> [#1]:
> https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configurati
> on
> [#2]:
>
> http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamF
> ilter.html
>
> On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com> wrote:
>
> > I too would be interested in CAPTCHA. I wrote my own engine for
> > another website and it's fairly easy. I could do with it
> > integrating into JSPWiki as my site has just been attacked by spam
> > bots posting huge amounts into the comments, actually causing Java
> > Out of Memory
> errors...
> >
> > On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> > wrote:
> >
> > > Hi, All,
> > >
> > > One of the features that attracts me to JSPWiki is its security. I
> > > am currently looking at captcha. I have spent hours on searching
> > > web and couldn't find a useful tip. It seems related to
> > > org.apache.wiki.filters.SpamFilter, but how I should configure it.
> > > Do I need to get a 3rd party 'asirra' jar? If so, wher can I get
> > > one? Can
> > anyone
> > > tell me how, e.g. some guide/doc/example for turning it on or set
> > > it
> up?
> > > Thanks.
> > >
> > > Regards,
> > >
> > > Xiaoming
> > >
> >
>
Re: CAPTCHA
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi,
being a filter, it is used on page level. If you wish to approve manually
account creation (or page saving), you should go with workflows [#1]. On a
quick thought, other options could include forbidding account creation, or
delegating authorization to the container or going with your own workflow..
Regarding the captcha parameter, if it is set to none, upon spam detection
you're redirected to the error page; if it's set to asirra you're
redirected to the Captcha.jsp page which tries to determine if you're a
human using the Asirra service [#2].
regards,
juan pablo
[#1]:
https://jspwiki-wiki.apache.org/Wiki.jsp?page=Configuration#section-Configuration-WorkflowConfiguration
[#2]: http://research.microsoft.com/en-us/um/redmond/projects/asirra/
On Wed, Jun 10, 2015 at 1:25 PM, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
wrote:
> Thanks, Juan,
>
> On the Javadoc [#2], there is following paramether:
>
> captcha - Sets the captcha technology to use. Current allowed values are
> "none" and "asirra".
>
> Is this a feature having already implemented? If so, where can I find more
> details on how to use captcha? Is it used during user login, or account
> creating, or is it used on page level?
>
> Regards,
> Xiaoming
>
> -----Original Message-----
> From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
> Sent: 10 June 2015 11:05
> To: user@jspwiki.apache.org
> Subject: Re: CAPTCHA
>
> Hi,
>
> indeed, the Spam Filter is the place to go. To see how to set it up see
> [#1], in this case starting on step 2, as the filter is already on
> classpath. To see its parameters the best place is the javadoc [#2].
>
>
> HTH,
> juan pablo
>
>
> [#1]:
> https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configuration
> [#2]:
>
> http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamFilter.html
>
> On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com> wrote:
>
> > I too would be interested in CAPTCHA. I wrote my own engine for
> > another website and it's fairly easy. I could do with it integrating
> > into JSPWiki as my site has just been attacked by spam bots posting
> > huge amounts into the comments, actually causing Java Out of Memory
> errors...
> >
> > On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> > wrote:
> >
> > > Hi, All,
> > >
> > > One of the features that attracts me to JSPWiki is its security. I
> > > am currently looking at captcha. I have spent hours on searching web
> > > and couldn't find a useful tip. It seems related to
> > > org.apache.wiki.filters.SpamFilter, but how I should configure it.
> > > Do I need to get a 3rd party 'asirra' jar? If so, wher can I get
> > > one? Can
> > anyone
> > > tell me how, e.g. some guide/doc/example for turning it on or set it
> up?
> > > Thanks.
> > >
> > > Regards,
> > >
> > > Xiaoming
> > >
> >
>
RE: CAPTCHA
Posted by Xiaoming Yang <xi...@ctsu.ox.ac.uk>.
Thanks, Juan,
On the Javadoc [#2], there is following paramether:
captcha - Sets the captcha technology to use. Current allowed values are "none" and "asirra".
Is this a feature having already implemented? If so, where can I find more details on how to use captcha? Is it used during user login, or account creating, or is it used on page level?
Regards,
Xiaoming
-----Original Message-----
From: Juan Pablo Santos Rodríguez [mailto:juanpablo.santos@gmail.com]
Sent: 10 June 2015 11:05
To: user@jspwiki.apache.org
Subject: Re: CAPTCHA
Hi,
indeed, the Spam Filter is the place to go. To see how to set it up see [#1], in this case starting on step 2, as the filter is already on classpath. To see its parameters the best place is the javadoc [#2].
HTH,
juan pablo
[#1]:
https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configuration
[#2]:
http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamFilter.html
On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com> wrote:
> I too would be interested in CAPTCHA. I wrote my own engine for
> another website and it's fairly easy. I could do with it integrating
> into JSPWiki as my site has just been attacked by spam bots posting
> huge amounts into the comments, actually causing Java Out of Memory errors...
>
> On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> wrote:
>
> > Hi, All,
> >
> > One of the features that attracts me to JSPWiki is its security. I
> > am currently looking at captcha. I have spent hours on searching web
> > and couldn't find a useful tip. It seems related to
> > org.apache.wiki.filters.SpamFilter, but how I should configure it.
> > Do I need to get a 3rd party 'asirra' jar? If so, wher can I get
> > one? Can
> anyone
> > tell me how, e.g. some guide/doc/example for turning it on or set it up?
> > Thanks.
> >
> > Regards,
> >
> > Xiaoming
> >
>
Re: CAPTCHA
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi,
indeed, the Spam Filter is the place to go. To see how to set it up see
[#1], in this case starting on step 2, as the filter is already on
classpath. To see its parameters the best place is the javadoc [#2].
HTH,
juan pablo
[#1]:
https://jspwiki-wiki.apache.org/Wiki.jsp?page=PageFilter%20Configuration
[#2]:
http://jspwiki.apache.org/apidocs/2.10.1/org/apache/wiki/filters/SpamFilter.html
On Tue, Jun 9, 2015 at 11:54 PM, Paul Uszak <pa...@gmail.com> wrote:
> I too would be interested in CAPTCHA. I wrote my own engine for another
> website and it's fairly easy. I could do with it integrating into JSPWiki
> as my site has just been attacked by spam bots posting huge amounts into
> the comments, actually causing Java Out of Memory errors...
>
> On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk>
> wrote:
>
> > Hi, All,
> >
> > One of the features that attracts me to JSPWiki is its security. I am
> > currently looking at captcha. I have spent hours on searching web and
> > couldn't find a useful tip. It seems related to
> > org.apache.wiki.filters.SpamFilter, but how I should configure it. Do I
> > need to get a 3rd party 'asirra' jar? If so, wher can I get one? Can
> anyone
> > tell me how, e.g. some guide/doc/example for turning it on or set it up?
> > Thanks.
> >
> > Regards,
> >
> > Xiaoming
> >
>
Re: CAPTCHA
Posted by Paul Uszak <pa...@gmail.com>.
I too would be interested in CAPTCHA. I wrote my own engine for another
website and it's fairly easy. I could do with it integrating into JSPWiki
as my site has just been attacked by spam bots posting huge amounts into
the comments, actually causing Java Out of Memory errors...
On 9 June 2015 at 21:56, Xiaoming Yang <xi...@ctsu.ox.ac.uk> wrote:
> Hi, All,
>
> One of the features that attracts me to JSPWiki is its security. I am
> currently looking at captcha. I have spent hours on searching web and
> couldn't find a useful tip. It seems related to
> org.apache.wiki.filters.SpamFilter, but how I should configure it. Do I
> need to get a 3rd party 'asirra' jar? If so, wher can I get one? Can anyone
> tell me how, e.g. some guide/doc/example for turning it on or set it up?
> Thanks.
>
> Regards,
>
> Xiaoming
>