Last modified: 2006-07-13 00:03:37 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T8644, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 6644 - Invoking Special:Blockme with the requisite ip parameter generates SQL error
Invoking Special:Blockme with the requisite ip parameter generates SQL error
Product: MediaWiki
Classification: Unclassified
Special pages (Other open bugs)
All All
: Normal minor (vote)
: ---
Assigned To: Nobody - You can work on this!
Depends on:
  Show dependency treegraph
Reported: 2006-07-12 07:52 UTC by Nick Jenkins
Modified: 2006-07-13 00:03 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Nick Jenkins 2006-07-12 07:52:46 UTC
[[Special:Blockme]], (which appears to allow a user who knows the proxy key the
ability to block themselves) takes a special parameter, "ip", which is
calculated as:
md5 ( your IP address + $wgProxyKey ), which for me on non-accessible private
test wiki equals:
md5 ("" .
"6826d709cefab1ea688cc1295c376fa816ab551b79cf7b29714f6fcd238b507f") =

However using this parameter in a URL (in this example:
), causes the following error:

Database error
A database query syntax error has occurred. This may indicate a bug in the
software. The last attempted database query was:

    (SQL query hidden)

from within function "Block::insert". MySQL returned error "1054: Unknown column
'ipb_anon_only' in 'field list' (localhost)".

... and the database error log contains this:
Wed Jul 12 17:29:25 EST 2006 bling  Block::insert     localhost 1054  Unknown
column 'ipb_anon_only' in 'field list' (localhost)        INSERT IGNORE INTO
VALUES (NULL,'','0','10000','Your IP address has been blocked because
it is an open proxy. Please contact your Internet service provider or tech
support and inform them of this serious security

Maybe either update the query, or delete the file if it's not being used? (At
first glance it only appears to be called by includes/ProxyTools.php , but I'm
not quite clear how ProxyTools is called - and if it isn't, and there are no
plans to add it back in, perhaps deletion may be the better option).
Comment 1 Brion Vibber 2006-07-12 18:43:08 UTC
It sounds like you just didn't update the ipblocks table
for the latest schema change on trunk. Can you run update.php
and confirm?
Comment 2 Nick Jenkins 2006-07-13 00:03:37 UTC
You are entirely correct, and that fixed the problem. Sorry!

Marking as resolved, status: INVALID.

Note You need to log in before you can comment on or make changes to this bug.