Last modified: 2010-05-15 14:35:49 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T5994, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 3994 - Script account names as "Template namespace initialisation script" should be reserved user accounts
Script account names as "Template namespace initialisation script" should be ...
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
User login and signup (Other open bugs)
unspecified
All All
: Normal enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
http://test.leuksman.com/index.php?ti...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-11-16 13:36 UTC by lɛʁi לערי ריינהארט
Modified: 2010-05-15 14:35 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description lɛʁi לערי ריינהארט 2005-11-16 13:36:28 UTC
regards reinhardt [[user:gangleri]]
Comment 1 lɛʁi לערי ריינהארט 2005-11-16 13:42:13 UTC
Beside this name a blacklist could be used; see [[en:Wikipedia:Username]] and
[[en:Wikipedia_talk:Username]].
It could include ofending names, common names used by vandals etc.
Comment 2 lɛʁi לערי ריינהארט 2005-11-16 13:42:50 UTC
somehow related:
bug 1524: usernames should use unicode whitelist
Comment 3 lɛʁi לערי ריינהארט 2005-11-16 15:53:51 UTC
the good news:
[[user:Template_namespace_initialisation_script]] where *not* granted sysop
priviledges; this would be a security hole;

the bad news:
contributions of MediaWiki software script signed with
[[user:Template_namespace_initialisation_script]] see
[[:en:special:Contributions/Template_namespace_initialisation_script]] are
highjacked.
Comment 4 Brion Vibber 2005-11-16 23:14:35 UTC
Please stop spewing "somehow related" comments all over everything.
Comment 5 Rob Church 2005-11-20 15:43:40 UTC
Why does this need to be a reserved username? I thought that such scripts were
used one-off to cover glitches, e.g. the deletion bot on enwiki which Tim ran
while delete was broken; which is now no longer used. And the system doesn't see
an anonymous user signing with that username as the same user as the TNIS anyway.

I agree with Brion on the "somehow related" points too. If you know it's
related, mark as duplicate or similar - if you don't, keep quiet.
Comment 6 lɛʁi לערי ריינהארט 2005-11-20 16:15:37 UTC
(In reply to comment #5)
> And the system doesn't see an anonymous user signing with that username as the
same user as the TNIS anyway.

http://test.leuksman.com/view/Special:Contributions/Template_namespace_initialisation_script
shows cotributions *previous* then the time I created this account.
Comment 7 Rob Church 2005-11-20 16:17:31 UTC
Because of the user string saved with the diff. I meant in terms of permissions.
Comment 8 Brion Vibber 2005-11-21 02:25:58 UTC
The 'Template namespace initialisation script' is obsolete, it was part of the 1.2 to 1.3 
upgrade some while back. There won't be anything created with it in the future.

It might be wise to reserve 'MediaWiki default' internally however, as that's actively used by 
the updater scripts.
Comment 9 lɛʁi לערי ריינהארט 2006-01-22 10:42:55 UTC
(In reply to comment #8)
> The 'Template namespace initialisation script' is obsolete, it was part of the
1.2 to 1.3 
> upgrade some while back. There won't be anything created with it in the future.
> 
> It might be wise to reserve 'MediaWiki default' internally however, as that's
actively used by 
> the updater scripts.
> 

At Bug 4720: "User edit counter does not load"
the script account name "Conversion script" is mentioned.
Please provide a list of these accounts here.

Thanks in advance!

best regards reinhardt [[user:gangleri]]
Comment 10 Rob Church 2006-04-04 08:36:21 UTC
"MediaWiki default" is now blacklisted at login and registration. Internally,
it's still considered a valid username; maintenance scripts might want to
initialise a user object with it, or something, so I haven't blacklisted it in
User::isValidUsername().

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links