Open pwnage101 opened 7 years ago
The existing "access question" feature is similar to what I describe:
access-question:
access-question-answers:
# specifies a question that users must answer when they attempt to create
# an account, along with a comma-separated list of acceptable answers.
# This can be used to institute a rudimentary password for signing up as
# a user on the wiki, or as an alternative to reCAPTCHA.
# Example:
# access-question: What is the code given to you by Ms. X?
# access-question-answers: RED DOG, red dog
However, I want to expand this functionality to anonymous edits.
In my experience, asking a simple question with a one-word answer on every edit AND enabling rate limiting has proven to be super effective on a public wiki that I admin. We haven't had any spam breaches in over 5 years now, and we are also indexed by search engines. The plugin that I used: https://www.mediawiki.org/wiki/Extension:QuestyCaptcha
I prefer this method because it does not leak user metadata to recaptcha/google or any other 3rd party service.
I'm creating this issue to gauge interest for a gitit plugin, and also so that I don't forget to learn haskell and write this plugin eventually.