Last modified: 2011-09-18 05:47:00 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T32898, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 30898 - 'donatewiki' redirect domain should not be accessible as a real wiki
'donatewiki' redirect domain should not be accessible as a real wiki
Status: RESOLVED INVALID
Product: Wikimedia
Classification: Unclassified
Fundraising (Other open bugs)
unspecified
All All
: Unprioritized critical (vote)
: ---
Assigned To: Arthur Richards
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-09-14 17:13 UTC by Krinkle
Modified: 2011-09-18 05:47 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Krinkle 2011-09-14 17:13:34 UTC
I just received an email about 'donatewiki' being created [1]. And left me wondering. Is this supposed to be used as an actual wiki ? Right now it is set up as an actual MediaWiki instance with a database etc.

Albeit the http://donate.wikimedia.org has been prevented from access in most ways by an overruling redirect, it's still accessible:
* https://secure.wikimedia.org/wikipedia/donate/wiki/Main_Page
* https://secure.wikimedia.org/wikipedia/donate/w/api.php?action=query&generator=allpages

If the wiki is not needed, it would makes sense to just set this up as a redirect in the apache config, doesn't need a wiki for the subdomain to exist, right ?


--
Krinkle

[1] http://lists.wikimedia.org/pipermail/newprojects/2011-September/000033.html
Comment 1 Arthur Richards 2011-09-14 20:26:23 UTC
Hi Krinkle,

This wiki /is/ needed for this year's fundraiser and we are in the process of setting it up.  Currently, landing pages and other key parts of fundraising messaging are hosted on wikimediafoundation.org.  This has two primary problems for us moving forward in this year's fundraiser:

* There are a lot more people that have access to edit on wikimediafoundation.org than need access to fundraising-specific resources.  This has security implications.  Setting up another wiki specifically for fundraising-related messaging will allow for much more fine-grained access control.

* Due to European privacy laws, we cannot have any donor information pass through the cacheing servers in the Netherlands.  The easiest way to achieve this without sacrificing performance of wikimediafoundation.org is to set up another wiki, and configure it in such a way to never hit the cacheing servers in the Netherlands.

We've been using donate.wikimedia.org as a redirect to the donation pages on wikimediafoundation.org and many things rely on links to donate.wikimedia.org to get people to the fundraiser landing pages.  So we figured the cleanest way to handle all of this was to set up a new fundraising-specific wiki with donate.wikimedia.org pointed to it.

Thanks,
Arthur

(In reply to comment #0)
> I just received an email about 'donatewiki' being created [1]. And left me
> wondering. Is this supposed to be used as an actual wiki ? Right now it is set
> up as an actual MediaWiki instance with a database etc.
> 
> Albeit the http://donate.wikimedia.org has been prevented from access in most
> ways by an overruling redirect, it's still accessible:
> * https://secure.wikimedia.org/wikipedia/donate/wiki/Main_Page
> *
> https://secure.wikimedia.org/wikipedia/donate/w/api.php?action=query&generator=allpages
> 
> If the wiki is not needed, it would makes sense to just set this up as a
> redirect in the apache config, doesn't need a wiki for the subdomain to exist,
> right ?
> 
> 
> --
> Krinkle
> 
> [1] http://lists.wikimedia.org/pipermail/newprojects/2011-September/000033.html
Comment 2 Krinkle 2011-09-18 05:47:00 UTC
Thanks for the heads up.

So once everything is up and running it will no longer be a redirect like it is now. That explained it. Marking bug as invalid.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links