Last modified: 2009-02-19 21:28:16 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T18615, the corresponding Phabricator task for complete and up-to-date bug report information.
First Last Prev Next    This bug is not in your last search results.
Bug 16615 - Automatic account creation of locally forbidden usernames is not prevented by local blacklists
Automatic account creation of locally forbidden usernames is not prevented by...
Status: RESOLVED DUPLICATE of bug 14629
Product: MediaWiki extensions
Classification: Unclassified
CentralAuth (Other open bugs)
unspecified
All All
: Normal enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2008-12-11 23:41 UTC by Brownout
Modified: 2009-02-19 21:28 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Brownout 2008-12-11 23:41:53 UTC 
Users can bypass local username blacklists by creating a forbidden username on another wiki.
Example:
On Italian Wikipedia the creation of usernames ending in ".it" (the italian TLD) is forbidden. The regex used in MediaWiki:Titleblacklist is .*\.it\b.* <newaccountonly>
16:03, 11 December 2008 Sogreat.wiki.it (Talk | contribs | block) Account created automatically
This is a relatively harmless case, it would be different with profanities and insults.
Comment 1 Andrew Garrett 2009-02-19 21:19:43 UTC 
Gotchas:
* Calling AbortNewAccount doesn't work this early in the request -- many extensions expect $wgUser to be set, and it's called as $wgUser is being unstubbed.
* CentralAuth has its own AbortNewAccount hook, meaning you need to hack around and tell that hook that the user is *really* okay to create.

Half-written patch stashed back here. The first gotcha is causing me immense grief.
Comment 2 Mike.lifeguard 2009-02-19 21:28:16 UTC 

*** This bug has been marked as a duplicate of bug 14629 ***
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.

Navigation
Links