Last modified: 2013-01-04 14:56:40 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T40633, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 38633 - Can block a random non-existing user via API
Can block a random non-existing user via API
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
API (Other open bugs)
1.20.x
All All
: High major (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-07-24 09:23 UTC by rxy
Modified: 2013-01-04 14:56 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description rxy 2012-07-24 09:23:26 UTC
1st issue. Could block to non-existing user via API.

recently mediawiki, when execute block to non-existing user via API, it was blocked as user id "0 ". 

In case of previous version mediawiki, doesn't block it, then 'nosuchuser ' error returned. 

http://test.wikipedia.org/wiki/Special:Log/block?page=User%3AHoshiryuhoshiTest

2nd issue. In case of executing block to already blocked user without "reblock arg" via API, In previous version mediawiki, existing block settings are not changed to new block settings.
but recently when executing block to already blocked user without "reblock arg", existing block settings are changed to new block settings.
Comment 1 Alex Monk 2012-07-24 23:16:30 UTC
Confirmed, I can block a random non-existing user through the UI:
>>> mwc.apiRequest(action = 'block', token = mwc.getEditToken(), user = 'pwokwpfok', reason = 'Test bug 38633')
{u'block': {u'id': u'1', u'reason': u'Test bug 38633', u'userID': 0, u'user': u'pwokwpfok', u'expiry': u'infinite'}}
Comment 2 Alex Monk 2012-12-22 19:34:18 UTC
(In reply to comment #0)
> 1st issue. Could block to non-existing user via API.
> 
> recently mediawiki, when execute block to non-existing user via API, it was
> blocked as user id "0 ". 
> 
> In case of previous version mediawiki, doesn't block it, then 'nosuchuser '
> error returned. 
> 
> http://test.wikipedia.org/wiki/Special:Log/
> block?page=User%3AHoshiryuhoshiTest

Gerrit change #39860
Can you make a new bug for your second issue please?
Comment 3 Alex Monk 2013-01-04 14:56:15 UTC
(In reply to comment #0)
> 2nd issue. In case of executing block to already blocked user without
> "reblock
> arg" via API, In previous version mediawiki, existing block settings are not
> changed to new block settings.
> but recently when executing block to already blocked user without "reblock
> arg", existing block settings are changed to new block settings.

Split into bug 43634.

(In reply to comment #2)
> Gerrit change #39860

Merged by IAlex.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links