By kobit on

Hi,

I have just upgraded my Drupal installation from ver 5.x to 6.x.

Yesterday I spotted that all of sudden some old articles pop-up on top of the front page. I managed to change publication options to not show them on the front-page.

However this is very annoying because from time to time some other old articles suddenly show on top of the front page. When I looked at the revisions page of the article I can see that there has been a new revision created by Anonymous user and the only change I can see in the article is the publication date/time.
The publication time in the new revision is set to current time and old articles pop-up on top of the front page.

I don't know how to prevent it, how to stop it or how to control it. I set all the permission not to allow anonymous users to edit content, they can only add comments.

Has anyone experienced similar problems? Does anyone know how to deal with this?

Maybe I have some security issues with my installation. If there is somebody who can help me I would appreciate the help.

A website I am talking about is: http://www.tigase.org

⋅ Categories: Drupal 6.x

Comments

kobit’s picture

kobit commented

I think I have found the cause of this. It seems to me that DraggableViews Book handler has some kind of security issue which allows spam bots get around permissions and commit some changes to book pages.
This is not confirmed though and I have submitted a bug report already: http://drupal.org/node/643916

danielb’s picture

danielb commented

I'm having a similar such problem.
My 'revisions' list is filled with revisions made by anonymous users. They don't have permission to edit or even view my nodes so I don't see how this is possible.
It's really annoying because everytime I fix something like a computed field value or pathauto path it seems to reset it back to how it was via an anonymous revision just a few minutes later.
Driving me insane, I bet it's someone's contrib

barckhoff’s picture

barckhoff commented

I'm also experiencing mysterious anonymous updates. Have no clue where it's coming from...

Anonymous’s picture

Anonymous (not verified) commented

I have the same problem, but on group posts. And there are no draggable on them.
Realy don't know.

tarzadon’s picture

tarzadon commented

I have nodes with file attachments. We had a complaint that a bunch of nodes had missing files. I saw revisions made by Anonymous. I had to revert all those revisions so I could get the file attachments back. For a handful of files, this is okay, but if this happens on a broader scale, this behavior is unacceptable.