Last modified: 2014-01-27 11:59:09 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T62448, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 60448 - Links in mail notifications should ensure that recipient user is logged in as himself
Links in mail notifications should ensure that recipient user is logged in as...
Status: NEW
Product: MediaWiki
Classification: Unclassified
Email (Other open bugs)
1.23.0
All All
: Low enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-01-26 20:31 UTC by Tim Landscheidt
Modified: 2014-01-27 11:59 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Tim Landscheidt 2014-01-26 20:31:33 UTC
Mail notifications have a short disclaimer:

| There will be no other notifications in case of further activity unless
| you visit this page while logged in. [...]

However, the links in the notification do not ensure that a logout or a login under a different username is noticed by a reasonably attentive user.

I would like to see the links:

| https://en.wikipedia.org/w/index.php?title=Page_title&diff=0&oldid=4711

changed to:

| https://en.wikipedia.org/w/index.php?title=Page_title&diff=0&oldid=4711&requser=Username

adding a parameter "requser" to index.php.

The semantics would be that if "requser" is set and there is no user logged in or its username is different to the value of "requser", the page would link/redirect to a Special:UserLogin (&returnto=...&returntoquery=...) instead with a banner: "The link you followed suggested that you should be logged in as 'Username', for example to keep your watchlist up to date.  You can either log in now or view the requested page (logged out|under your current log in)."

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links