New Calendar Spam

[Gedalia Pasternak]

Hi All,
Just thought I'd warn people that there seem to be scripts showing
up that add bogus calenders with spammy titles. Is there a trivial way
to disable non users adding cals (does making calendars.xml read only
work?)
-Gedalia

[daltonlp]

You can disable write permissions on the "pending_actions.xml" file.
But this workaround also prevents people from adding anonymous events
for approval (assuming you have this feature turned on).

I'll work on an option to require password approval to add calendars.
It's a little surprising to see link spammers target installations of
Plans, but I suppose it was bound to happen at some point.

- Lloyd

[daltonlp]

The just-released version 7.9 has some changes to address this.

- Lloyd