Go to file
Translation updater bot 152dff1e7e Localisation updates from https://translatewiki.net.
Change-Id: Iadded43a5a810116cf16c193ebe809f37182dd7f
2024-05-23 08:38:23 +02:00
.phan .phan/config.php: Add hCaptcha 2022-12-13 21:28:52 +00:00
FancyCaptcha Localisation updates from https://translatewiki.net. 2024-05-23 08:38:23 +02:00
hCaptcha Localisation updates from https://translatewiki.net. 2024-04-25 08:30:19 +02:00
i18n Localisation updates from https://translatewiki.net. 2024-05-16 08:29:29 +02:00
includes Add explicit parentheses around mixed boolean operator 2024-03-23 00:52:19 +01:00
maintenance GenerateFancyCaptchas: Include stderr result if captcha.py returns an error code 2024-03-21 16:40:49 +00:00
MathCaptcha build: Upgrade mediawiki/mediawiki-codesniffer to v43.0.0 2024-03-10 17:18:48 +01:00
QuestyCaptcha Localisation updates from https://translatewiki.net. 2024-03-26 08:19:21 +01:00
ReCaptchaNoCaptcha Localisation updates from https://translatewiki.net. 2024-04-25 08:30:19 +02:00
resources build: Switch eslint to ES6 mode, and make pass 2023-09-20 09:27:51 +01:00
SimpleCaptcha Replace isset() with null check in SimpleCaptcha 2024-04-01 13:38:44 +02:00
tests/phpunit tests: Remove redundant wgMainCacheType=hash 2024-03-29 23:03:41 +00:00
Turnstile Localisation updates from https://translatewiki.net. 2024-05-16 08:29:29 +02:00
.eslintrc.json build: Switch eslint to ES6 mode, and make pass 2023-09-20 09:27:51 +01:00
.gitignore build: Upgrade eslint-config-wikimedia from 0.10.1 to 0.11.0 2019-04-03 15:54:28 -07:00
.gitreview Whoops, track not trace 2016-10-24 17:02:20 -07:00
.mailmap Update Legoktm's mailmap entry 2021-04-11 19:15:29 -07:00
.phpcs.xml tests: Replace assertEmpty with assertSame 2022-11-24 23:02:46 +01:00
.stylelintrc.json Use json extension for .stylelintrc 2017-08-19 09:42:18 +02:00
AUTHORS.txt Update AUTHORS.txt 2016-08-17 23:08:41 +02:00
badwordlist Make badwordlist optional 2023-07-28 15:03:04 -07:00
captcha-old.py Deprecate use of captcha-old.py 2024-02-19 19:11:43 +00:00
captcha.py Merge "captca.py: Fix PIL 10 support again" 2024-01-29 19:36:50 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/phan-taint-check-plugin to 1.3.0 2018-08-19 12:06:19 -07:00
composer.json build: Upgrade mediawiki/mediawiki-codesniffer to v43.0.0 2024-03-10 17:18:48 +01:00
ConfirmEdit.alias.php Remove LEFT-TO-RIGHT MARK (U+200E) from comments 2022-08-27 08:49:20 +00:00
COPYING Add COPYING 2014-02-08 01:51:17 +00:00
extension.json Revert "Drop various class aliases" 2024-01-17 04:46:58 +00:00
Gruntfile.js build: Upgrade eslint-config-wikimedia from 0.25.1 to 0.26.0 2024-01-12 22:34:15 +00:00
package-lock.json build: Upgrade grunt-banana-checker from 0.11.0 to 0.11.1 2024-01-12 22:34:24 +00:00
package.json build: Upgrade grunt-banana-checker from 0.11.0 to 0.11.1 2024-01-12 22:34:24 +00:00
README.md Add Turnstile support 2024-01-15 19:31:24 +00:00
tox.ini *.py: Fixup a couple more linting issues 2024-01-16 22:25:27 +00:00

ConfirmEdit

ConfirmEdit extension for MediaWiki

This extension provides various CAPTCHA tools for MediaWiki, to allow for protection against spambots and other automated tools.

For more information, see the extension homepage at: https://www.mediawiki.org/wiki/Extension:ConfirmEdit

Overview

The following modules are included in ConfirmEdit:

  • SimpleCaptcha - users have to solve an arithmetic math problem
  • MathCaptcha - users have to solve a math problem that's displayed as an image
  • FancyCaptcha - users have to identify a series of characters, displayed in a stylized way
  • QuestyCaptcha - users have to answer a question, out of a series of questions defined by the administrator(s)
  • ReCaptchaNoCaptcha - users have to solve different types of visually or audially tasks.
  • hCaptcha - users have to solve visual tasks
  • Turnstile - users check a box, which runs some client-side JS heuristics

License

ConfirmEdit is published under the GPL license.

Authors

The main framework, and the SimpleCaptcha and FancyCaptcha modules, were written by Brion Vibber.

The MathCaptcha module was written by Rob Church.

The QuestyCaptcha module was written by Benjamin Lees.

Additional maintenance work was done by Yaron Koren.

Configuration comments

/**
 * List of IP ranges to allow to skip the captcha, similar to the group setting:
 * "$wgGroupPermission[...]['skipcaptcha'] = true"
 *
 * Specific IP addresses or CIDR-style ranges may be used,
 * for instance:
 * $wgCaptchaWhitelistIP = array('192.168.1.0/24', '10.1.0.0/16');
 */
$wgCaptchaWhitelistIP = false;

/**
 * Actions which can trigger a captcha
 *
 * If the 'edit' trigger is on, *every* edit will trigger the captcha.
 * This may be useful for protecting against vandalbot attacks.
 *
 * If using the default 'addurl' trigger, the captcha will trigger on
 * edits that include URLs that aren't in the current version of the page.
 * This should catch automated linkspammers without annoying people when
 * they make more typical edits.
 *
 * The captcha code should not use $wgCaptchaTriggers, but CaptchaTriggers()
 * which also takes into account per namespace triggering.
 */
$wgCaptchaTriggers = [];
$wgCaptchaTriggers['edit']          = false; // Would check on every edit
$wgCaptchaTriggers['create']        = false; // Check on page creation.
$wgCaptchaTriggers['sendemail']     = false; // Special:Emailuser
$wgCaptchaTriggers['addurl']        = true;  // Check on edits that add URLs
$wgCaptchaTriggers['createaccount'] = true;  // Special:Userlogin&type=signup
$wgCaptchaTriggers['badlogin']      = true;  // Special:Userlogin after failure

/**
 * You may wish to apply special rules for captcha triggering on some namespaces.
 * $wgCaptchaTriggersOnNamespace[<namespace id>][<trigger>] forces an always on /
 * always off configuration with that trigger for the given namespace.
 * Leave unset to use the global options ($wgCaptchaTriggers).
 *
 * Shall not be used with 'createaccount' (it is not checked).
 */
$wgCaptchaTriggersOnNamespace = [];

# Example:
# $wgCaptchaTriggersOnNamespace[NS_TALK]['create'] = false; //Allow creation of talk pages without captchas.
# $wgCaptchaTriggersOnNamespace[NS_PROJECT]['edit'] = true; //Show captcha whenever editing Project pages.

/**
 * Indicate how to store per-session data required to match up the
 * internal captcha data with the editor.
 *
 * 'CaptchaSessionStore' uses PHP's session storage, which is cookie-based
 * and may fail for anons with cookies disabled.
 *
 * 'CaptchaCacheStore' uses MediaWiki core's MicroStash,
 * for storing captch data with a TTL eviction strategy.
 */
$wgCaptchaStorageClass = 'CaptchaSessionStore';

/**
 * Number of seconds a captcha session should last in the data cache
 * before expiring when managing through CaptchaCacheStore class.
 *
 * Default is a half hour.
 */
$wgCaptchaSessionExpiration = 30 * 60;

/**
 * Number of seconds after a bad login that a captcha will be shown to
 * that client on the login form to slow down password-guessing bots.
 *
 * Has no effect if 'badlogin' is disabled in $wgCaptchaTriggers or
 * if there is not a caching engine enabled.
 *
 * Default is five minutes.
 */
$wgCaptchaBadLoginExpiration = 5 * 60;

/**
 * Allow users who have confirmed their email addresses to post
 * URL links without being harassed by the captcha.
 *
 * @deprecated since 1.36
 * $wgGroupPermissions['emailconfirmed']['skipcaptcha'] = true; should be used instead.
 */
$wgAllowConfirmedEmail = false;

/**
 * Number of bad login attempts before triggering the captcha.  0 means the
 * captcha is presented on the first login.
 */
$wgCaptchaBadLoginAttempts = 3;

/**
 * Regex to whitelist URLs to known-good sites...
 * For instance:
 * $wgCaptchaWhitelist = '#^https?://([a-z0-9-]+\\.)?(wikimedia|wikipedia)\.org/#i';
 * Local admins can define a whitelist under [[MediaWiki:captcha-addurl-whitelist]]
 */
$wgCaptchaWhitelist = false;

/**
 * Additional regexes to check for. Use full regexes; can match things
 * other than URLs such as junk edits.
 *
 * If the new version matches one and the old version doesn't,
 * toss up the captcha screen.
 *
 * @fixme Add a message for local admins to add items as well.
 */
$wgCaptchaRegexes = [];