Last modified: 2012-06-09 01:58:06 UTC
The expiry time for password requests is configurable using the wgNewPasswordExpiry. However, the expiry time for email confirmations is hard wired to 7 days. It would be nice if this was configurable too (we want to set it to just a couple of hours in order to thwart spammers...) (The value is set in function confirmationToken in /usr/share/mediawiki/includes/User.php)
This is already fixed in a later version of mediawiki (1.15 vs. 1.18). You have to update your installation. *** This bug has been marked as a duplicate of bug 27159 ***