Download the PHP package lucamauri/wiki2ban without Composer
On this page you can find all versions of the php package lucamauri/wiki2ban. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package wiki2ban
Wiki2Ban
Wiki2Ban (W2B) is a MediaWiki extension that logs failed authentication attempts to a file that Fail2Ban can read, enabling automatic IP banning of attackers.
This extension is inspired by Extension:Fail2banlog, which is unmaintained and built for an older MediaWiki version. Wiki2Ban was written from scratch by Luca Mauri, originally for WikiTrek, and released as open source for the broader MediaWiki community.
Features
- Hooks into MediaWiki's authentication system to detect failed login attempts
- Writes a structured log line for each failure, including timestamp, username, wiki name, and client IP address
- Correctly resolves the client IP address behind reverse proxies and CDNs
- Log format is compatible with Fail2Ban out of the box
- Includes ready-to-use Fail2Ban filter and jail configuration files
- Includes an optional Log Navigator format definition for interactive log analysis
- No database changes required
- Configurable log file path
Requirements
- MediaWiki >= 1.42.0
- PHP >= 8.4
- Fail2Ban >= 0.10 (for progressive banning support)
Installation
The easiest way to install the extension is via Composer, which will automatically resolve all dependencies.
Add the following to composer.local.json at the root of your MediaWiki installation (create the file if it does not exist):
Then run Composer from the root of your MediaWiki installation:
Add the following line near the rest of the extension loading calls in LocalSettings.php:
Then add the configuration parameters described in the next section.
Configuration
Add the following to LocalSettings.php:
$wgW2BLogFilePath
The full path to the log file that Wiki2Ban will write to and that Fail2Ban will monitor. The web server process must have write permission to this file and its parent directory.
Default value: /var/log/mediawiki/wiki2ban.log
Fail2Ban configuration
After installing and configuring the extension, you need to configure Fail2Ban to monitor the log file. The f2bconf/ directory in this repository contains ready-to-use configuration files.
Filter
Copy f2bconf/w2bfilter.conf to Fail2Ban's filter directory:
Jail rule
Copy f2bconf/w2brule.conf to Fail2Ban's jail directory:
Then edit the file to set logpath to match the value of $wgW2BLogFilePath in your LocalSettings.php.
Tuning for production
The default rule triggers after 5 failed attempts in 60 seconds and bans for 10 minutes. For a production wiki exposed to the internet, consider stricter values:
This bans an IP for 24 hours after 3 failures within 5 minutes. Progressive banning is enabled by default in the provided configuration — each repeated offence doubles the ban duration up to a maximum of one week.
After making changes, reload Fail2Ban:
Troubleshooting
To capture detailed debug log messages from Wiki2Ban, add the following to LocalSettings.php:
Optional: Log Navigator format
f2bconf/wiki2ban.json is a format definition for the Log Navigator application, which allows interactive exploration and filtering of the Wiki2Ban log file. See the lnav format documentation for installation instructions.
License
GNU General Public License, version 2 or later
