https://wiki.recessim.com/w/index.php?action=history&feed=atom&title=RECESSIM%3AHandling_vandalismRECESSIM:Handling vandalism - Revision history2026-10-06T22:51:38ZRevision history for this page on the wikiMediaWiki 1.43.9https://wiki.recessim.com/w/index.php?title=RECESSIM:Handling_vandalism&diff=4257&oldid=prevHash: Protected "RECESSIM:Handling vandalism": Admin runbook (sysop-only) ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))2026-09-30T20:53:30Z<p>Protected "<a href="/view/RECESSIM:Handling_vandalism" title="RECESSIM:Handling vandalism">RECESSIM:Handling vandalism</a>": Admin runbook (sysop-only) ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 20:53, 30 September 2026</td>
</tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr>
<!-- diff cache key RECESSIM:diff:1.41:old-4256:rev-4257 -->
</table>Hashhttps://wiki.recessim.com/w/index.php?title=RECESSIM:Handling_vandalism&diff=4256&oldid=prevHash: Admin runbook: spotting, undoing and stopping vandalism2026-09-30T20:53:29Z<p>Admin runbook: spotting, undoing and stopping vandalism</p>
<p><b>New page</b></p><div>This page is for '''administrators''' (sysops). It explains how to spot, undo and prevent vandalism on RECESSIM. Almost everything on a wiki is reversible: every edit is kept in page history, and deleted pages can be restored.<br />
<br />
== 1. Spotting problems ==<br />
* '''[[Special:RecentChanges]]''': every edit. Edits that nobody has reviewed yet show a red '''!''' ("unpatrolled"). Click '''diff''', then '''Mark as patrolled''' once you're happy with an edit.<br />
* '''Tags''': five automatic filters tag suspicious edits in Recent Changes. They never block anyone.<br />
** <code>av-blanking</code>: a page was emptied (over 500 bytes down to under 50).<br />
** <code>av-large-removal</code>: more than 5 KB removed in one edit.<br />
** <code>av-link-dump</code>: more than 10 external links added in one edit.<br />
** <code>av-repeated-chars</code>: keyboard mashing (one letter g–z repeated 30+ times; hex dumps are ignored).<br />
** <code>av-page-move</code>: any page move (moves are rare here).<br />
* '''[[Special:AbuseLog]]''': the full list of filter hits, with the exact edit details. Manage the filters at [[Special:AbuseFilter]].<br />
* '''Keep an eye on changes''': watch important pages (star icon), or subscribe to the Recent Changes feed (Atom link in the sidebar of [[Special:RecentChanges]]).<br />
<br />
== 2. Undoing damage ==<br />
* '''One bad edit''': open the page's '''History''' and click '''undo''' on that edit.<br />
* '''Several bad edits in a row by one user''': click '''rollback''' in the history or on Recent Changes. It reverts all of that user's consecutive latest edits in one click. Sysops and members of the '''trusted''' group have rollback.<br />
* '''Restore an older good version''': in History, open the good revision, click '''Edit''', and save it with a summary such as "Restore version of <date>".<br />
* '''A moved page''': move it back (the '''Move''' tab), and delete the leftover redirect if needed.<br />
* '''Lots of junk pages from one account''': [[Special:Nuke]] lists every page that account created, so you can mass-delete them.<br />
* '''Deleted by mistake''': [[Special:Undelete]].<br />
<br />
== 3. Stopping it ==<br />
* '''Block the account''': [[Special:Block]]. Use a short block for a first offence and indefinite for obvious vandal-only accounts. Leave "Autoblock" ticked so the IP address is blocked too.<br />
* '''Remove editing rights''': [[Special:UserRights]]. Take the account out of '''writer'''; sysops can add or remove writer and trusted.<br />
* '''Ban evasion or sockpuppets''': [[Special:CheckUser]] shows which accounts share IP addresses (CheckUser right only).<br />
* '''Protect a page under attack''': the '''Protect''' tab (admins only, set an expiry). High-use templates are already permanently protected.<br />
<br />
== 4. Giving people the right level of access ==<br />
* '''writer''': can edit and create pages. Granted after someone introduces themselves on Discord.<br />
* '''trusted''': writer plus '''rollback''', and their own edits are marked as reviewed automatically. Give this to reliable regular editors.<br />
* '''sysop''': everything above plus delete, block, protect and filters. Keep this group small.<br />
* Writer rights are removed from accounts that have been inactive for over 12 months. Anyone can ask on Discord to have them restored.<br />
<br />
== 5. Worst case: restoring from backup ==<br />
If the wiki is badly damaged (for example a compromised admin account, mass deletion, or database problems), the server makes a '''full backup every Sunday''' (database, uploaded files, settings). A copy is pulled to off-site storage.<br />
* On the server, backups are in <code>/var/backups/wiki/</code> (the newest two, with <code>latest</code> pointing at the most recent). Each one contains a <code>README.txt</code> with step-by-step restore instructions.<br />
* A restore is a server-level job: contact Hash. Undoing edits through History (above) is almost always the better option.<br />
<br />
[[Category:RECESSIM]]</div>Hash