Last modified: 2008-09-13 12:35:27 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T17577, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 15577 - [[Special:Emailuser]] triggers autoblock
[[Special:Emailuser]] triggers autoblock
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
User blocking (Other open bugs)
1.14.x
All All
: Normal minor (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-09-12 11:33 UTC by Sam Korn
Modified: 2008-09-13 12:35 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Sam Korn 2008-09-12 11:33:46 UTC
When a blocked user uses [[Special:Emailuser]] to email another user, the autoblock is triggered, even if they have not been blocked from sending email.

This happens both on enwiki and on a vanilla install from SVN.
Comment 1 Fran Rogers 2008-09-13 06:09:09 UTC
It looks like a user's autoblock was being reset to 24 hours as a side effect every time they performed something where the software checked for a block, including when isBlockedFromEmailuser() was called. (Rather confusing and unpredictable, and possibly causing other users to suspect the blockee is sockpuppeting.) I changed this in r40771 so autoblocks will instead be spread every time a user begins their session.
Comment 2 Andrew Garrett 2008-09-13 06:10:07 UTC
Don't we want to spread blocks as often as possible?
Comment 3 Fran Rogers 2008-09-13 06:28:59 UTC
I can't think of any benefit we gain by spreading blocks more than once per session. The user's IP is rarely going to change within the same session, in most cases. The one case it _will_ change is if they deliberately reset their IP within a short timeframe, with the same browser window still open. However, if they're still logged in at this point, they'll still be blocked directly; while their new IP will not be caught in the autoblock, the same would have happened under both the old and new approaches if they had simply logged out or cleared their cookies when switching IPs, which presumably anyone savvy enough to reset their IP would be doing in the first place. :)
Comment 4 Andrew Garrett 2008-09-13 12:35:27 UTC
(In reply to comment #3)
> I can't think of any benefit we gain by spreading blocks more than once per
> session. The user's IP is rarely going to change within the same session, in
> most cases. The one case it _will_ change is if they deliberately reset their
> IP within a short timeframe, with the same browser window still open. However,
> if they're still logged in at this point, they'll still be blocked directly;
> while their new IP will not be caught in the autoblock, the same would have
> happened under both the old and new approaches if they had simply logged out or
> cleared their cookies when switching IPs, which presumably anyone savvy enough
> to reset their IP would be doing in the first place. :)
> 

Well, why did this bug get filed, then? :)

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links