Last modified: 2013-07-16 23:34:40 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T18103, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 16103 - Attempting to create username "~~~~" on Wikimedia wikis outputs bad error message
Attempting to create username "~~~~" on Wikimedia wikis outputs bad error mes...
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
Special pages (Other open bugs)
unspecified
All All
: Low enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-10-25 06:12 UTC by MZMcBride
Modified: 2013-07-16 23:34 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description MZMcBride 2008-10-25 06:12:10 UTC
When attempting to create the username "~~~~", the error message returned is an almost entirely white screen with the single word "Error".

The error message returned should be inside the standard interface and should be the same error message that is displayed when a user tries to create an account that contains a { or [ or other illegal character.
Comment 1 Brion Vibber 2008-10-25 20:16:46 UTC
I see a regular "Login error - You have not specified a valid user name."
Comment 2 Alex Z. 2008-10-25 21:59:44 UTC
(In reply to comment #1)
> I see a regular "Login error - You have not specified a valid user name."
> 

On a Wikimedia site?
Comment 3 Fran Rogers 2008-10-27 06:02:53 UTC
I get the same behavior as MrZ on all Wikimedia sites. The entire output is simply the word "Error," no additional HTML markup or anything.
Comment 4 Brion Vibber 2008-10-27 06:07:17 UTC
As previously discussed on IRC, the error message is triggered by one of Wikimedia's vandalism-robot checks and is not a general MediaWiki issue.
Comment 5 Aaron Schulz 2009-01-03 05:57:40 UTC
(In reply to comment #4)
> As previously discussed on IRC, the error message is triggered by one of
> Wikimedia's vandalism-robot checks and is not a general MediaWiki issue.
> 

Is this an extension somewhere?
Comment 6 MZMcBride 2013-01-08 18:37:09 UTC
I'm still able to reproduce this bug at <http://test.wikipedia.org/w/index.php?title=Special:UserLogin&returnto=Main+Page&type=signup> (though I had to disable JavaScript in my browser to see the standard account creation form).
Comment 7 Liangent 2013-01-08 19:10:11 UTC
BTW it's an HTTP 500 Internal Server Error.
Comment 8 Tim Starling 2013-07-16 23:34:40 UTC
Presumably it was this:

if ( $wasPosted
	&& isset( $_REQUEST['wpCreateaccount'] )
	&& isset( $_REQUEST['wpName'] )
	&& ( preg_match( '/Curps|~/', $_REQUEST['wpName'] ) || isset( $_SERVER['HTTP_EXPECT'] ) )
	) {

	# 'Curps' vandal is registering lots of accounts with defamatory stuff about Curps
	# random-name vandal is sending 'Expect: 100-continue' with posts

	$headers = var_export( getallheaders(), true );
	wfErrorLog( $headers, 'udp://10.0.5.8:8420/vandalism' );

	header( 'HTTP/1.0 500 Internal Server Error' );
	wfErrorLog( "STOPPED HIT WITH ERROR:\n" . urlencode( $_POST['wpName'] ) . "\n", 'udp://10.0.5.8:8420/vandalism' );
	die( 'Error' );
}

It was in checkers.php, which was removed in March 2013.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links