Exporting AbuseFilter

Successfully tested Abuse Filters that can be freely exported. Give attribution from the import to prevent copyright wiki closure:

General Vandalism
/*Borrowed From Applemasterexpert*/ (action == "edit" | action == "submit") & ( (article_namespace == 0 &( (new_size < 50 & old_size > 500) & !(rmwhitespace(removed_lines) rlike ".*==.span.+.Welcome(tothewiki|)(!|)..span.==.*") & (!("sysop" in user_groups) & !("rollback" in user_groups))
 * article_namespace == 1
 * article_namespace == 2
 * article_namespace == 3
 * article_namespace == 4test
 * article_namespace == 5
 * article_namespace == 6
 * article_namespace == 7
 * article_namespace == 8
 * article_namespace == 9
 * article_namespace == 10
 * article_namespace == 11
 * article_namespace == 12
 * article_namespace == 13
 * article_namespace == 14
 * article_namespace == 15
 * article_namespace == 111
 * article_namespace == 113))
 * edit_delta <= -500)

Spamming about company
/*Borrowed from Applemasterexpert, Wikipedia article used as filtering*/ old_size==0 & user_age==0 & article_namespace rlike "^(0|2)$" & contains_any(lcase(added_lines), "your bankruptcy filing", "bad credit car", "secure your rights", "planning your retirement", "your company provides", "receive even more information", "check out our web-page", "check out our webpage", "in making your web", "raise your positioning", "your main keywords", "your household", "your financial", "your client")

Preventing editing in someone else's userpage
!("sysop" in user_groups | "content-moderators" in user_groups | "bureaucrat" in user_groups ) & article_namespace == 2 & action="edit" & article_text != user_name & strpos(article_text, user_name + "/") != 0

Preventing new users swearing/cursing/using inappropriate words
!("autoconfirmed" in user_groups | "sysop" in user_groups) & lcase(added_lines) rlike "(?:(?:(?:penis|1\.800|1-800|4chan|\banal\b|\banus\b|\bass\b|asshole|ballin|ballsack|beaner|bitch|blowjob|boner|boo+bs|booty|\bbutt\b|buttche?[ec]ks]|butth[ou]|choa?de?|clit|co+ck|cuck|\bcum\b|cunt|dick|dildo|douche.?bag|fagg?[oe]t|fellat[ie]o?|frick|fu+c?k|gay|handjob|hitler|horny|jizz|learn to spell|lesbo|manchild|mast[eu]rbat[ei]|\bnazi\b|negro|nigg*a|nigg?[ae]r|nipple|nutsack|pe*nis|\bpoo\b|poo+p|porn|pussy|pussies|queef|\braper?\b|retard|rimjob|shit|sjw|slut|testica?le?|tits|titty|titties|todd coward|tranny|\btwat\b|vagina|wank|whore|([a-zA-Z]\s){5,}|([a-zA-Z]\.){5,}|text-decoration: ?blink|loll?ol?)[ \r\n]*)|(([asdfghjkl;])(?!\1)\s*){30})"

Excessive caps
/*Author: Applemasterexpert*/ (

!("sysop" in user_groups) & (article_namespace == 1 | article_namespace == 7 | article_namespace == 9 | article_namespace == 11 | article_namespace == 13 | article_namespace == 15 | article_namespace == 111)

& ( rcount("\b[A-Z]{2,}\b",added_lines) * 4 > rcount("\b[\S]{2,}\b",added_lines)


 * added_lines rlike "[A-Z]{2,}[\s\pP]+[A-Z]{2,}"


 * added_lines rlike "[A-Z\pP]{11,}"


 * added_lines rlike "\n{8,}"

)
 * rcount("\b[A-Z][\S]+\b",added_lines) * 2 > rcount("\b[\S]{2,}\b",added_lines) + 2

)



(

!"sysop" in user_groups &(article_namespace == 0 | article_namespace == 114) & !"#REDIRECT" in added_lines & added_lines rlike "^[A-Z0-9\s\pP]*?[A-Z]{5}[A-Z0-9\s\pP]*$" & !added_lines rlike "__(NOEDIT|NEW)SECTION__" & !added_lines rlike "__(NO|FORCE)?TOC__"

)

Blocking IP range
/*Created by Applemasterexpert*/ (action == "edit" | action == "move")& ip_in_range(user_name, "(INSERT IP RANGE)") & !("sysop" in user_groups | "autoconfirmed" in user_groups) Replace INSERT IP RANGE into the actual IP range, such as, as an example.

Preventing links to YouTube
/*Created by Applemasterexpert*/ (article_namespace == 0) & (lcase(added_lines) rlike "https?://[a-z0-9./]*youtube\.[a-z]{2,}/(watch|\?v=)") & !(lcase(removed_lines) rlike "https?://[a-z0-9./]*youtube\.[a-z]{2,}/(watch|\?v=)") & !("sysop" in user_groups)

Preventing mass removal of categories
/*Created by Applemasterexpert*/ !("autoconfirmed" in user_groups | "sysop" in user_groups) & ( article_namespace == 0 &   ( edit_delta > -2000 & (     removed_lines irlike "\[\[\w?category" &      ! new_wikitext irlike "\[\[\w?category|#\w?redirect|stub\w?}}|{{\w?uncat|{{\w?db-attack|{{\w?db-g10|{{\w?disamb|{{\w?dab|{{\w?wi"    ) ) )

Preventing the use of rollback right or undo hack rights
!"sysop" in user_groups & !"vstf" in user_groups & !"staff" in user_groups & !"helper" in user_groups & !"rollback" in user_groups & !"content-moderator" in user_groups & summary irlike "undid|undo(ing)|revert(ing|ed)|\brv\b"

Tagging a new message!
/*This filter is both used in Message Walls and Forums*/ action == "edit" & article_namespace=1201

Module should be edited by either admins or volunteer developers
article_namespace == 818 & action == "edit" & !("sysop" in user_groups | "voldev" in user_groups)

Abusing wikitext/symbols/HTML accordance of the current vandals
!("sysop" in user_groups | "autoconfirmed" in user_groups) & lcase(article_text) rlike "(▋|╲|▏┈┈┈┈┈▏|┈ ┈┈▏|╱▔▔▔▔╲|┈┈┈┈┈|┈┈╱▏|╰┳┳┳)" & (action == "move" | action == "edit")