Recovering from an attack

This guide is intended for inexperienced MediaWiki system administrators who have suffered defacement against one or more wikis.

Identifable wiki content cannot be seen
The first thing to do is determine whether the site was actually compromised, or "hacked" as some would say. Try going to different pages to see if the defacement is on all of them. If multiple pages are defaced, then it is possible that a common template or the sitenotice was vandalized.

To determine whether the site is still loading, open the developer console in the browser and check the HTML. If the HTML includes the page content, than the site is probably not compromised.