Last modified: 2013-10-03 18:14:15 UTC
Currently anonymous users can create new pages under the "User" namespace, which doesn't make any sense. This is an approach used by spammers, also in installations with some filter in account creation: they just go an create "user pages"anonymously, pasting there their rubbish. What is the right approach to fix this? [[mw:Manual:$wgNamespaceProtection]] prevent just any edits made by some user group to some namespace. But that might be too restrictive since there might be good reasons for an anonymous users to edit or comment an existing user page. Is there a way to prevent page creation only?
We only differentiate between create and createtalk for creation permissions. If you need namespace-specific creation/editing permissions then I suggest looking at one of the numerous extensions that can handle this. WONTFIX for core?
There are probably extensions that could do that, or it would be a very simple extension to write. Actually, just add something like this in your LocalSettings: $wgHooks['userCan'][] = function ( &$title, &$user, $action, &$result ) { if ( ( $action === 'edit' || $action === 'create' ) && $title->getNsText() === "User" && !$user->isLoggedIn() ) { return false; } return true; }
