Last modified: 2012-06-22 19:35:52 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T39567, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 37567 - [SF] auto-create of red-linked pages disobeys $wgGroupPermissions to publicly expose anonymous user IP


Summary:	[SF] auto-create of red-linked pages disobeys $wgGroupPermissions to publicly...

Status:	RESOLVED FIXED

Product:	MediaWiki extensions
Classification:	Unclassified
Component:	SemanticForms (Other open bugs)
Version:	unspecified
Hardware:	All All

Importance:	Unprioritized major (vote)
Target Milestone:	---
Assigned To:	Yaron Koren

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2012-06-13 22:06 UTC by badon
Modified:	2012-06-22 19:35 UTC (History)
CC List:	1 user (show)

See Also:
Web browser:	---
Mobile Platform:	---
Assignee Huggle Beta Tester:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description badon 2012-06-13 22:06:05 UTC

Populating red-linked pages automatically exposes IP addresses of unregistered site users by creating the pages with their account, even when anonymous editing is disabled in LocalSettings.php as follows:

# Disable anonymous editing when set to "false"
# http://www.mediawiki.org/wiki/Manual:User_rights
$wgGroupPermissions['*']['edit'] = false;

 Here's the relevant doc:

 http://www.mediawiki.org/wiki/Extension:Semantic_Forms/Linking_to_forms#Populating_red-linked_pages_automatically

 Here's an example:

 http://www.coincompendium.com/w/index.php/Special:Contributions/203.87.162.70

Comment 1 Yaron Koren 2012-06-22 19:35:52 UTC

Fixed in Git.

Wikimedia Bugzilla is closed!

Search

Personal tools

Navigation

Links