Abuse filter management

Filter parameters

Filter ID:	7
Description: (publicly viewable)
Conditions:	!("autoconfirmed" in user_groups) /* this edit_delta ignores large blankings that are treated by another filter / & edit_delta >= -3000 & article_namespace == 0 / No added lines usually mean a blanking which is dealt with by other filter / & length(added_lines) != 0 & !("#redirect" in lcase(added_lines)) /Counts of more reference tags are removed than added / & (rcount("(<ref>\|<ref\s+(name\|group)\|</ref>)",removed_lines) > rcount("(<ref>\|<ref\s+(name\|group)\|</ref>)",added_lines)) /Excludes changing to the named reference format and removing closing tags attached to formerly named refs. Unequality is to account for closing the first named tag / & !(rcount("<ref>",removed_lines) = rcount("<ref\s+(name\|group)",added_lines) \| rcount("</ref>",removed_lines) <= rcount("<ref\s+(name\|group)",added_lines)) /Excludes removal of references to Wikipedia itself */ & !(count("http://en.wikipedia.org",removed_lines) > count("http://en.wikipedia.org",added_lines))
Notes: (private)	"<ref\|</ref" split for clarity Appears to get more and better hits on referenced info now too. Apparently, previous version wasn't working properly. --Mgm Switched on. - It Is Me Here Tagging instead of disallowing, there are plenty of good reasons to remove references. -- Mgm Oh, is this for all references? Wasn't there one regarding removing a {{Reflist}} template? - It Is Me Here That one (filter 79) was a test, and it doesn't appear to be working properly. It hasn't caught anything for at least 24 hours. - Mgm removed private flag, unnecessary -- Zzuuzz Updated format that should also catch named references and avoid the old reference grouping tag. --Mgm Filter 79 now working properly, removing line that specifies reflist. Working on better regex to avoid <references/> being hit with this one --Mgm Changing to edit_delta <= -1000 from >= -1000; seems like this was the intent. >= and <= comparisons are based on actual value, not absolute value. Correct me if this was the intent. Also, we are getting some false positives on this, see http://en.wikipedia.org/w/index.php?title=Interstate_5_in_Washington&diff=279452062&oldid=278504317 - Hersfold >= is correct. It is supposed to exclude large removals from being evaluated since they're covered by blanking filters. It was an error in the regex. Instead of allowing for <ref name="whatever">, the regex allowed choosing between <ref> and <ref name>, the last of which obviously didn't work. -- Mgm added note in filter to avoid confusion --Mgm Altered regex to treat refs as whole blocks, to avoid situation where a duplicate ref is changed to a named ref (<ref>Blah</ref> --> <ref name=foo/>). Now won't catch users removing one end of a ref though. Might have ec'd with cmt above, but can't tell in this wierd system :D --HM Okay... I THINK this is finally a correct regex that: 1) grabs <ref> ... </ref> as entire blocks 2) grabs <ref name="foo"/> 3) ignores <references/> 4) allows newline breaks between <ref> and </ref> tags. 5) grabs only consecutive <ref>, </ref> pairs (as opposed to jumping from the first <ref> to the last </ref>). -DF Restored original version, added exclusions for naming references and removing closing tags of named references. --Mgm Added comments for clarity --Mgm Too many false positives, setting to log only. --Conti From Coppertwig: A more exact count might be obtained by defining a ref-opening as either "<ref>" or "<ref name" and a ref-closing as either "</ref>" or "ref name ... />". (With the named reference, the same tag will sometimes count as both an opening and a closing.) The code might look something like this (assuming rcount expects regular expressions): /* count of removed ref-openings exceeds count of added ref-openings, or count of removed ref-closings exceeds count of added ref-closings; named refs with slashes count as both openings and closings. / & (rcount("(<ref>\|<ref\sname)",removed_lines) > rcount("(<ref>\|<ref\sname)",added_lines) \| rcount("(</ref>\|<ref\sname[^>/]/>)",removed_lines) > rcount("(</ref>\|<ref\sname[^>/]*/>)",added_lines) Adjusted delta to -3000 due to a sock removing references that has been missed due to the total removed content. Ref [[User:Ryulong/Sandbox#Ref_removing_vandal]] - Shirik 24 Jan I replaced \sname with \s(name\|group). - Ruslik Something 'wrong' here .. it catches also '<ref></ref>' (i.e., empty tags, as included in the article creation wizard). They should be excluded. Disable. Most of the hits are false positives. -Sole Soul
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	05:54, 6 September 2012 by Parvez Dewan (Pdewan) (Talk \| contribs)
History:	View this filter's history
Tools:	Test this filter against recent edits Export this filter to another wiki{"row":{"af_id":"7","af_pattern":"!(\"autoconfirmed\" in user_groups)\r\n\/* this edit_delta ignores large blankings that are treated by another filter \/\r\n& edit_delta >= -3000\r\n& article_namespace == 0\r\n\/ No added lines usually mean a blanking which is dealt with by other filter \/\r\n& length(added_lines) != 0\r\n& !(\"#redirect\" in lcase(added_lines))\r\n\/Counts of more reference tags are removed than added \/\r\n& (rcount(\"(<ref>\|<ref\\s+(name\|group)\|<\/ref>)\",removed_lines) > rcount(\"(<ref>\|<ref\\s+(name\|group)\|<\/ref>)\",added_lines))\r\n\/Excludes changing to the named reference format and removing closing tags attached to formerly named refs. Unequality is to account for closing the first named tag \/\r\n& !(rcount(\"<ref>\",removed_lines) = rcount(\"<ref\\s+(name\|group)\",added_lines) \| rcount(\"<\/ref>\",removed_lines) <= rcount(\"<ref\\s+(name\|group)\",added_lines))\r\n\/Excludes removal of references to Wikipedia itself \/\r\n& !(count(\"http:\/\/en.wikipedia.org\",removed_lines) > count(\"http:\/\/en.wikipedia.org\",added_lines))","af_user":"1","af_user_text":"Pdewan","af_timestamp":"20120906055456","af_enabled":"1","af_comments":"\"<ref\|<\/ref\" split for clarity\r\n\r\nAppears to get more and better hits on referenced info now too. Apparently, previous version wasn't working properly. --Mgm\r\n\r\nSwitched on. - It Is Me Here\r\nTagging instead of disallowing, there are plenty of good reasons to remove references. -- Mgm\r\nOh, is this for all references? Wasn't there one regarding removing a {{Reflist}} template? - It Is Me Here\r\n That one (filter 79) was a test, and it doesn't appear to be working properly. It hasn't caught anything for at least 24 hours. - Mgm\r\nremoved private flag, unnecessary -- Zzuuzz\r\nUpdated format that should also catch named references and avoid the old reference grouping tag. --Mgm\r\nFilter 79 now working properly, removing line that specifies reflist. Working on better regex to avoid <references\/> being hit with this one --Mgm\r\n\r\nChanging to edit_delta <= -1000 from >= -1000; seems like this was the intent. >= and <= comparisons are based on actual value, not absolute value. Correct me if this was the intent. Also, we are getting some false positives on this, see http:\/\/en.wikipedia.org\/w\/index.php?title=Interstate_5_in_Washington&diff=279452062&oldid=278504317 - Hersfold\r\n\r\n>= is correct. It is supposed to exclude large removals from being evaluated since they're covered by blanking filters. It was an error in the regex. Instead of allowing for <ref name=\"whatever\">, the regex allowed choosing between <ref> and <ref name>, the last of which obviously didn't work. -- Mgm\r\n\r\nadded note in filter to avoid confusion --Mgm\r\n\r\nAltered regex to treat refs as whole blocks, to avoid situation where a duplicate ref is changed to a named ref (<ref>Blah<\/ref> --> <ref name=foo\/>). Now won't catch users removing one end of a ref though. Might have ec'd with cmt above, but can't tell in this wierd system :D --HM\r\n\r\n\r\nOkay... I THINK this is finally a correct regex that:\r\n\r\n 1) grabs <ref> ... <\/ref> as entire blocks\r\n 2) grabs <ref name=\"foo\"\/>\r\n 3) ignores <references\/>\r\n 4) allows newline breaks between <ref> and <\/ref> tags.\r\n 5) grabs only consecutive <ref>, <\/ref> pairs (as opposed to jumping from the first <ref> to the last <\/ref>).\r\n\r\n-DF\r\n\r\nRestored original version, added exclusions for naming references and removing closing tags of named references. --Mgm\r\n\r\nAdded comments for clarity --Mgm\r\n\r\nToo many false positives, setting to log only. --Conti\r\n\r\nFrom Coppertwig:\r\nA more exact count might be obtained by defining a ref-opening as either \"<ref>\" or \"<ref name\" and a ref-closing as either \"<\/ref>\" or \"ref name ... \/>\". (With the named reference, the same tag will sometimes count as both an opening and a closing.) The code might look something like this (assuming rcount expects regular expressions):\r\n\r\n\/ count of removed ref-openings exceeds count of added ref-openings, or count of removed ref-closings exceeds count of added ref-closings; named refs with slashes count as both openings and closings. \/ & (rcount(\"(<ref>\|<ref\\sname)\",removed_lines) > rcount(\"(<ref>\|<ref\\sname)\",added_lines) \| rcount(\"(<\/ref>\|<ref\\sname[^>\/]\/>)\",removed_lines) > rcount(\"(<\/ref>\|<ref\\sname[^>\/]*\/>)\",added_lines)\r\n\r\nAdjusted delta to -3000 due to a sock removing references that has been missed due to the total removed content. Ref [[User:Ryulong\/Sandbox#Ref_removing_vandal]] - Shirik 24 Jan\r\n\r\nI replaced \\sname with \\s(name\|group). - Ruslik\r\n\r\nSomething 'wrong' here .. it catches also '<ref><\/ref>' (i.e., empty tags, as included in the article creation wizard). They should be excluded.\r\n\r\nDisable. Most of the hits are false positives. -Sole Soul","af_public_comments":"New user removing references","af_hidden":"0","af_hit_count":"0","af_throttled":"0","af_deleted":"0","af_actions":"tag","af_global":"0"},"actions":{"tag":{"action":"tag","parameters":["references removed"]}}}

Actions taken when matched

Flag the edit in the abuse log

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time:

seconds

Group throttle by:

(one per line, combine with commas)

user

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without MediaWiki prefix)

Actions:

Prevent the user from performing the action in question

Revoke the user's autoconfirmed status

Block the user and/or IP address from editing

Remove the user from all privileged groups

Tag the edit for further review

Tags to apply (one per line):

references removed

Abuse filter management

Personal tools

Namespaces

Variants

Views

Actions

Search

Navigation

Toolbox

Translate