Talk:Title blacklist

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search
Requests and proposals Title blacklist Archives (current)→
The associated page is used by the Mediawiki Title Blacklist extension, and lists strings of text that may not be used as page titles for any Wikimedia Foundation projects (as well as many external wikis). Any meta administrator can edit the title blacklist.

For more information on what the title blacklist is for, and the processes used here, please see Title blacklist/About.

Please post comments to the appropriate section below: Proposed additions, Proposed removals, or Troubleshooting and problems, read the messageboxes at the top of each section for an explanation. Also, please check back some time after submitting, there could be questions regarding your request. In addition to that, please sign your posts with ~~~~ after your comment.

Completed requests are archived, additions and removal are logged.
<translate> Projects</translate>



List of all projects</translate>






Wikimedia Embassy</translate>


Project portals</translate>


Country portals</translate>



<translate> Spam blacklist</translate>

Title blacklist</translate>


Vandalism reports</translate>


Closure of wikis</translate>


Interwiki map</translate>






Bot flags</translate>




New languages</translate>


New projects</translate>


Username changes</translate>


Usurpation request</translate>




Speedy deletions</translate>


snippet for logging: {{tbl-log|7266286#{{subst:anchorencode:SectionNameHere}}}}

Proposed additions[edit]

Symbol comment vote.svg This section is for proposing that a page title be blacklisted; add new entries at the bottom of the section. Provide links demonstrating widespread creation by multiple users or IP's. Completed requests will be marked as done or denied and archived.

/Print subpages[edit]

I am an admin at the English Wikipedia. Today I learnt about "/Print" subpages. I realised they are a security problem since they let anyone edit any template, no matter if the template is protected or not. As a test I used it to change the main page of the English Wikipedia, only using a non-admin account. It only affected printed versions of the main page, but that is bad enough. So I have blocked creation and editing of /Print subpages on the English Wikipedia. I suggest the same block is added here to protect all the other projects. For reference, here's the code I used at w:MediaWiki:Titleblacklist:

# /Print versions of templates. ("Templates" can be created in any namespace, so blocking in all namespaces.)
.*\/Print <noedit>

/Print subpages also have a number of other problems. And we don't need such subpages, since we already have a better solution that has none of the problems. See Template talk:Documentation#/Print for the details.

--David Göthberg 10:48, 20 February 2010 (UTC)

I note there's a couple wikis using this (google search is: inurl:"/print") but not many. Is it acceptable to require that admins perform edits to print subpages? Kylu 20:28, 23 August 2010 (UTC)

 Not done There does not seem to be any pressing need for this for 3+ years now. --MF-W 17:30, 5 October 2013 (UTC)

Happy Birthday lyrics[edit]

Please add “.*Birthday.*Birthday.*” to the global title blacklist! -- 10:00, 22 May 2010 (UTC)

why? -- seth 13:24, 23 May 2010 (UTC)

Is it legal to use the lyrics of the song “Happy Birthday” as a page title? -- 16:05, 23 May 2010 (UTC)

Are there any cases of misuse yet? -- seth 01:04, 24 May 2010 (UTC)
Sure, at least in the US; see s:Happy Birthday to You.--Prosfilaes 23:07, 24 August 2010 (UTC)

 Not done No convincing arguments were given. --MF-W 17:30, 5 October 2013 (UTC)

Personal attacks on zhwiki[edit]

Please add the following to the blacklist:

.*沈彥良.* <newaccountonly>
.*[陈陳]霆.* <newaccountonly>
.*[许許]瑜真.* <newaccountonly>

These are names of some zhwiki sysops and currently some bad guy is making fun with their names and maybe sexual orientation. Already in the title blacklist of zhwiki. Thanks.--Jimmy Xu 14:43, 12 June 2010 (UTC)

I don't know this script - have you assessed these for potential false positives?  — mikelifeguard@meta:~$  20:40, 14 June 2010 (UTC)
These are very unlikely to cause false-positives. Already in local blacklist for years and there is no troubles. After all, I can't get a reason why someone would use other's name in their user name.--Jimmy Xu 11:55, 16 June 2010 (UTC)
FYI, this should fit in the section "#影武者 (from zh:) - well-known targets of serial vandalism".--Jimmy Xu 12:06, 16 June 2010 (UTC)

 Not done There does not seem to be any pressing need for this for 3+ years now --MF-W 17:32, 5 October 2013 (UTC)


Please add the following entries to the global title blacklist:

# Titles used by User: for vandalism

# German elevator company, not notable enough for Wikimedia projects
.*kni(sj|zi)a.*(streh?lo[vw]|wertlos).* <autoconfirmed>
# "Szar" is the Hungarian word for "shit"
szar <autoconfirmed>

-- 13:49, 24 November 2010 (UTC)

See also here, here, here, here, here, and here. -- 19:36, 24 November 2010 (UTC)

 Not done There does not seem to be any pressing need for this for ~3 years now --MF-W 17:33, 5 October 2013 (UTC)

Forex/Currency spam bots[edit]

# Forex/Currency bots using Rumer
.*[Ff]orex.*|.*[Cc]urrency <newaccountonly>
[Ff]orex Trading.*|[Cc]urrency) Trading.* <autoconfirmed>

Suggestion. (Possibly also noedit for the latter?) Link to deleted page log: [1] Links to blocked bot-created accounts log: [2] - Amgine/meta wikt wnews blog wmf-blog goog news 23:53, 5 February 2011 (UTC)

@Amgine: Do you still want this? PiRSquared17 (talk) 19:25, 17 December 2013 (UTC)
Goodness. now *that* was a fairly delayed reaction. xRumer bots rarely go away, but none of my farm wikis are currently susceptible to xRumer so I don't know if this one still active.(also reminds me to get back to work on the Wikimedians farm.) - Amgine/meta wikt wnews blog wmf-blog goog news 19:33, 17 December 2013 (UTC)

 Not done seems to be no pressing need for this ~3 years later, but feel free to request this again if it recurs. See also [3] (very slow). PiRSquared17 (talk) 20:08, 28 January 2014 (UTC)

Fakes of Wikimedia Deutschland (WMDE) staff[edit]

Please add the following to the blacklist (pls check the syntax, I hate regex):

.*(WMDE).* <newaccountonly>

(WMDE) is the usual suffix for accounts used by staff of Wikimedia Deutschland (WMDE). Misuse like in User:Gang Bang (WMDE), User:Schwell Körper (WMDE) and User:Freies Wissen (WMDE) is very missleading. Thanks. Raymond 10:47, 29 July 2011 (UTC)

hmm, shouldn't that regex be specific to german projects (or even the german wikipedia is it's the only affected project) ? Are there known use of such nick on any other wikis ? DarkoNeko 21:33, 29 July 2011 (UTC)
Account created on meta. --WizardOfOz talk 21:35, 29 July 2011 (UTC)
Okay then. DarkoNeko 21:36, 29 July 2011 (UTC)
.*\(WMDE\).* <newaccountonly>
-- seth 09:07, 30 July 2011 (UTC)
Thanks a lot :-) Raymond 09:08, 30 July 2011 (UTC)
  1. Please re-introduce (undone by DerHexer)
  2. It might be also useful to prevent (WMF):
.*\(WMF\).* <newaccountonly>
I am just aware of one case so far: User:Nn Wei (WMF) but the names should be reserved for WMF-staff-members. What do you if someone is name-grabbing: You can't use the account then. -- Rillke 16:44, 21 December 2011 (UTC)
Yes check.svg Done. Trijnstel 19:13, 21 December 2011 (UTC)
Unfortunately, I reverted it. A user who was created on one wiki (legitimately) with the restricted string was not able to be auto-created on login to another wiki because of the restriction. Philippe (WMF) 01:24, 30 December 2011 (UTC)
That's indeed a problem... because I already came over that before, I just submitted a bug: bugzilla:33429 - Hoo man (talk) 02:13, 30 December 2011 (UTC)
I gave the right permissions to the staff group and restored the blacklist's entry, it should work fine now. --Vituzzu 02:15, 30 December 2011 (UTC)
Is this going to work really? Ruslik 11:06, 4 January 2012 (UTC)

Ok, seems like a good workaround, but doesn't work for WMDE staff and WMF staff not being in the staff group (some AFAIK aren't, are they?) - Hoo man (talk) 03:27, 30 December 2011 (UTC)

The consequence will be that WM* accounts must be added to a specific globalgroup. --Vituzzu 21:23, 30 December 2011 (UTC)

Kitties, cats on fire etc.[edit]

See en:Special:Contributions/MyCatJustCaughtOnFire. This is just the latest in a spree of "cats/kitties on fire" accounts on enwp (though there is a bit of CWA I notice from the globalauth log), mainly used to harass Favonian and MuZemike. Might be helpful if someone implemented regex to prevent the creation of accounts with cat/kitty followed by fire later in a username. Hurricanefan25 21:05, 15 January 2012 (UTC)

Comment Comment Known sock|trouble maker, and the regex will just mean they use a variation in the pattern, not stop the account creation. billinghurst sDrewth 23:31, 4 February 2012 (UTC)

Username length restriction[edit]

Some local projects have restrictions on the length of usernames in their local titleblacklist (see eg en.wp and Commons, both currently 40 characters including the "user:" prefix). Differences between restrictions can break SUL. If a restriction is needed, it should be global. Rd232 (talk) 15:45, 17 May 2012 (UTC)

I am not sure that this is anything that stewards would be doing without a broad community consultation. At this current time, all I believe that we could do is to issue a warning that when choosing a username to note that long usernames may not work at all sites due to policy restrictions at some sites. One could reverse the conversation and ask why those two wikis have a introspective policy about username length and have not taken the conversation to a wider forum. In fact, I am unaware that either of the two domains that you mention clearly identify that they have such restrictions w:en:Wikipedia:Username_policy and Commons:Commons:Username policy and such would seem to be problematic. — billinghurst sDrewth 23:25, 17 May 2012 (UTC)
Yes. What's the best way to organise a discussion on this? Rd232 (talk) 12:52, 18 May 2012 (UTC)
I do not think that Titleblacklist affects automatic account creation. Ruslik (talk) 12:29, 19 May 2012 (UTC)
It does. Just a couple of days ago there was an issue at en:WP:VPT where a user couldn't log into Commons until I increased Commons' titleblacklist length restriction from 30 to 40. Rd232 (talk) 19:13, 19 May 2012 (UTC)
I fully concur that it does interrupt as Rd232 states. I have previously had to modify that filter at Commons. My preference would be for Commons to remove that restriction as it is both an old restriction, and one that I do not really find purposeful in the entirety of WMF. — billinghurst sDrewth 02:10, 20 May 2012 (UTC)
Well, it would be easier to make the case for removal if we knew why it was added in the first place... But it's not just Commons: en.wp and de.wp also have such restrictions, and it's quite likely other projects do too. That's why we need a wider discussion about the point of this, and if there is one, apply it via Meta, and if not, get rid of the restriction everywhere. Rd232 (talk) 11:22, 20 May 2012 (UTC)

Please notice, that applying it from meta wouldn't be the perfect solution as well, because user names get tested against the title blacklist in the following form Namespace 2 alias:User name. So eg. on enwiki this would be User:Username, but on dewiki it's Benutzer:Username, which has more chars. Maybe the following can bypass that: ^[^:]+:[^$]{1,X}$ where X is the max length of the actual user name - Hoo man (talk) 20:52, 20 May 2012 (UTC)

Hoo man is right. And that's why I modified that entry in w:de in January 2012.[4]
However, what is the reason for that 'non-dollar character class' instead of the 'any character class' after the first ":" in your suggested regexp ? I guess /^[^:]+:.{1,X}$/ should do a better job. -- seth (talk) 19:00, 29 May 2012 (UTC)
That totally doesn't matter, so do in whatever way you like (I only did it that way, cause I had regular expressions recently with a lot of end of string things, so I guess I just had it in my mind :P). - Hoo man (talk) 19:05, 29 May 2012 (UTC)
Well, it does matter. The '$' in char classes is interpreted literally and not as EOL or end of string.
Anyway, we have to negate the pattern for the TBL, so I suggest /^[^:]+:.{X,}$/. -- seth (talk) 22:17, 29 May 2012 (UTC)
Oh you're right, in PHP it's that way, in Python such conditions work... sorry - Hoo man (talk) 22:22, 29 May 2012 (UTC)
Well, python does not behave in another way than php does:
$ python -c 'import re; m ="[^$]", "$foo"); print;'
/[^$]/ is the class of all characters (even "\n"), that are not '$'. The class of characters that are not a linebreak simply is /./. -- seth (talk) 21:08, 30 May 2012 (UTC)

To say that in German: Ich beginne an mir selbst zu zweifeln, I think I might need a break :P Of course you're totally right, I thought I tested that at my own, but your example totally proves your point, even in Python 3. I think we can go back to topic now.... - Hoo man (talk) 22:21, 30 May 2012 (UTC)

 Not done, no consensus. PiRSquared17 (talk) 19:29, 17 December 2013 (UTC)

Cross-wiki vandalism: zh:WP:LHLS and zh:WP:HYIP[edit]

please add:

 .*跨.*服.*战‏‎.* <autoconfirmed>
 .*[离離].*火‏.* <autoconfirmed>
 .*姘‏‎.* <autoconfirmed>
 .*多.*面.*[体體]‏‎.* <autoconfirmed>
 .*[啦拉龟龜菈垃鞡][跨夸咵垮胯挎侉誇骻姱舿銙恗晇][氪克尅剋兙娔勀勊兛兡兞].* <autoconfirmed> 
 .*[乌鸟岛烏鳥島钨鎢邬鄔呜坞].*[跨夸咵垮胯挎侉誇骻姱舿銙恗晇][氪克尅剋兙娔勀勊兛兡兞].* <autoconfirmed> 
 .*[乌鸟岛烏鳥島钨鎢邬鄔呜坞][啦拉龟龜菈垃鞡].*[氪克尅剋兙娔勀勊兛兡兞].* <autoconfirmed>
 .*[乌鸟岛烏鳥島钨鎢邬鄔呜坞][啦拉龟龜菈垃鞡][跨夸咵垮胯挎侉誇骻姱舿銙恗晇].* <autoconfirmed> 
 .*Make.*cat.* <autoconfirmed> 
 .*Mys.*721tx.* <autoconfirmed> 
 .*李.*(煌|火皇).* <autoconfirmed>

see: zh:WP:LHLS, zh:WP:HYIP, wuu:姘坤多面体, lv:离火多面体, ja:離火多面体, wa:离火多面体, si:离火多面体, fr:Makecat, fr:Mys 721tx, de:Makecat, de:Mys 721tx, and so on.--GZWDer (talk) 09:33, 4 May 2013 (UTC)

@GZWDer: Is this still needed? PiRSquared17 (talk) 19:29, 17 December 2013 (UTC)
@PiRSquared17: All IP in zh:WP:HYIP was blocked for one year in August but still vandal in jawiki in November. And zh:WP:LHLS was inactive since May but some LTA is still doing similar vandalism now. So we still need 5-10th line.--GZWDer (talk) 05:40, 20 December 2013 (UTC)
GZWDer, Yes check.svg Done addition good? PiRSquared17 (talk) 20:10, 28 January 2014 (UTC)

Sumerr spambot accounts[edit]

Please add something which will prevent the account creation for this pattern --Glaisher [talk] 15:45, 18 August 2013 (UTC)

Well, patterns at least make it easy to recognize. I'm not sure that it's possible to block something here which wouldn't obstruct normal users who want to call themselves something with Summer-. --MF-W 20:09, 18 August 2013 (UTC)
I don't think real users would use something like [r]{5,}. So what I'm saying is add something that would prevent the account creation for rrrrrs (more than 5). Also if the account creations have ceased (I haven't seen anything lately), no need to go through the pain of adding it. --Glaisher [talk] 10:27, 19 August 2013 (UTC)

 Not done This is clearly stale, no new "summerr" accounts have occured for at least some months. --MF-W 01:51, 2 January 2014 (UTC)

Proposed removals[edit]

Symbol comment vote.svg This section is for proposing that a title be unlisted; please add new entries at the bottom of the section. Remember to provide the specific title or regex blacklisted, links to the articles they are used in or useful to, and arguments in favour of unlisting. Completed requests will be marked as done or denied and archived. The addition or removal of a title is not a vote, please do not bold the first words in statements.

Troubleshooting and problems[edit]

Symbol comment vote.svg This section is for comments related to problems with the blacklist (such as incorrect syntax or entries not being blocked), or problems saving a page because of a blacklisted title. This is not the section to request that an entry be unlisted (see Proposed removals above).

index.php spam[edit]

I note that not all pages ending in index.php, which have been created by spambots, are blacklisted. For the syntax (?:[^\/]+[\/:])?(index\.php|w\/wiki)(?:\/.+)?, the page Example/index.php is blacklisted, but Example/w/index.php is not. I suggest that you change this syntax to (?:.*?\/)?(index\.php|w\/wiki)(?:\/.*)?, in order to blacklist all pages with index.php and /w/wiki. In 2009, two pages ending in index.php were deleted: \"/w/index.php, on June 10, and Talk:Board elections/2007/w/index.php, on November 16. --Francisco 19:13, 15 February 2010 (UTC)

@Francisco Leandro: Is this still needed? PiRSquared17 (talk) 19:22, 17 December 2013 (UTC)
@PiRSquared17: No, it is not necessary. No pages ending in index.php have been created. Francisco (talk) 13:22, 3 January 2014 (UTC)
Closed Closed as  Not done: not needed anymore, reopen if it recurs. PiRSquared17 (talk) 19:53, 28 January 2014 (UTC)

Non-sul spammer blacklist[edit]

I try to stop this spammer with [5]. Could someone check if I did it correctly? Mathonius (talk) 12:05, 2 August 2012 (UTC)

Seems fine to me. Closed Closed PiRSquared17 (talk) 19:55, 28 January 2014 (UTC)

TitleBlacklist defaults[edit]

The spam blacklist is used by default by the extension, but mw:Extension:TitleBlacklist doesn't load this blacklist by default. I see that there are a few Wikimedia-specific rules, can you tell me if it's safe to assume that this can serve as good default for any MediaWiki install? We plan to include the extension by default in mw:MediaWiki 1.21 in the coming weeks, so feedback would be needed rather soon. --Nemo 12:37, 18 March 2013 (UTC)

@Nemo bis: update would be nice. What was done? PiRSquared17 (talk) 19:55, 28 January 2014 (UTC)


Status:    resolved

It seems to me that the "Hicks" line is malformatted - it is missing the closing ">" character. - Mike Rosoft (talk) 17:13, 15 August 2013 (UTC)

I added a >. --MF-W 00:42, 16 August 2013 (UTC)
Closed Closed so this can be archived. PiRSquared17 (talk) 19:55, 28 January 2014 (UTC)


Let's archive all the resolved sections. PiRSquared17 (talk) 19:24, 17 December 2013 (UTC)