Last modified: 2010-10-09 20:25:50 UTC
The Renameuser extension provides a RenameUserComplete hook for actions to trigger after a rename is performed. However AntiSpoof does not subscribe to this hook, so after a user gets renamed, there will be no entries in the spoofuser table for the renamed user and so the new username is vulnerable to other users spoofing it.
Created attachment 7612 [details] Untested patch Untested patch, _should_ work, but needs someone who has both extensions installed to verify.
Created attachment 7613 [details] Fix error from proofreading
r74566