Malicious users can create spam undetected on drupal.org just by going to Create Content and making a new book page without assigning it to an existing book.
In the old site, new pages always appeared in the Recent Updates (http://drupal.org/handbook/updates) which is available from the Documentation Team Links block. Members of the doc team would keep an eye on the queue and catch most of the spam. But now, if the user doesn't assign the page to a book it doesn't appear in the Recent Updates.
I suppose the upside is that, since it's not placed in existing books, the spam is not going to be displayed to most users. I only stumbled upon it when I clicked on the new "Site Users" taxonomy term (You can see the spam here: http://drupal.org/taxonomy/term/1754). But we still need to address this problem fairly urgently because the spam will have to be cleaned up by someone.
| Comment | File | Size | Author |
|---|---|---|---|
| #13 | doc_orphan_pages_view.txt | 5.45 KB | add1sun |
| #11 | orphan_book_pages_view.txt | 8.2 KB | WorldFallz |
Comments
Comment #1
add1sun commentedYeah, I'd like to have an orphan book pages listing somewhere so we can always see what is floating free. Not sure if this is something that we would need to do some do.module customizations for, or if we can use Views for it.
Comment #2
add1sun commentedWhoops, I ended up creating a duplicate of this #433268: List orphan pages for review. I'm going to move this to the webmasters queue to discuss the solution.
Comment #3
webernet commentedBumping - I just blocked 17 spammers and deleted dozens of test pages... #528146: Spammers
At the bare minimum we need a view so new pages can easily be reviewed.
Comment #4
WorldFallz commentedAgree completely-- the hunt and peck method for finding these things is far too time consuming. Who has the ability to create views? Is it really a webmaster issue or should it be moved to the infra queue? Updating title to reflect request.
Comment #5
gerhard killesreiter commentedInfra issue, we want to "dump" the views into code once they are completed. If somebody wants to create the view on d6.d.o catch me in IRC to get the permissions.
Comment #6
WorldFallz commentedI'm more than happy to create the view, but I don't have access to irc during the day so I won't be able to hit #drupal until tonite.
Comment #7
gerhard killesreiter commentedok, I gave you all perms on d6.d.o.
Comment #8
WorldFallz commentedThanks killes-- view is done. I stuck it at http://d6.drupal.org/orphans -- you may wish to change the path/menu settings. Take a look and let me know if anything needs to be changed.
Comment #9
add1sun commentedWhoops, this got wiped out in the last upgrade. We need to catch an export of it and attach it here so we don't lose "live" data. I'm monkeying with this, this evening so I'll see if I can get one done.
Comment #10
WorldFallz commentedIt seems I also lost perms on d6.d.o -- if you need me to recreate the view just let me know (and restore the perms).
Comment #11
WorldFallz commentedTurns out I still had the initial version of this view on one of my sandboxes. Text file of the export attached.
Comment #12
add1sun commentedHere is a scratch view: http://d6.drupal.org/handbook/orphan_pages. Not the prettiest but having the teaser, edit and delete links there will make it much faster to asses and deal with. Feel free to suggest changes to it, since I know the format is a little ugly. Export attached. Moving to docs queue for the team to review, then I'll move back for implmentation.
Comment #13
add1sun commentedattaching the view again
Comment #14
add1sun commentedOK, let's just implement this sucker, yeah? Please. :-)
Comment #15
avpadernoI don't see any link that allows to see orphan book pages; has the view been implemented?
Comment #16
michelleTagging and bumping
Comment #17
jhodgdonA separate view is not necessary. You can go to documentation/manage and filter by "Top level book", choosing "is empty(NULL)" from the drop-down list:
http://drupal.org/documentation/manage?comment_count_op=%3E%3D&comment_c...
Clickable link
That gives you a list of all book pages that are not in a top-level book.
[Edit by Michelle: For some reason that link wasn't coming up clickable so I added one.]
Comment #18
jhodgdonYeah, the core URL filter is lame. It misses valid URLs like that one, and also most of the URLs on api.drupal.org too. We should probably test and see if it's better in D7 and if not, file a bug (if there isn't already one).
Comment #19
jhodgdonAt this point, I think we can just mark this as fixed, since we have a way to find orphaned book pages.