Page MenuHomePhabricator

Do not auto-login when creating an account as another user
Closed, ResolvedPublic

Description

Author: stanley

Description:
In restricted wiki when administrator is the only person which can create
account, all account must be created by admin. After create account, user
(administrator) automatically logged-in with that account. And he/she must
log-out and relogin again as administrator. This is annoying. Please disable
this automatic log-in when creating account only when in restricted mode
($wgGroupPermissions['*']['createaccount']=false;)


Version: unspecified
Severity: enhancement

Details

Reference
bz5377

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:10 PM
bzimport set Reference to bz5377.
bzimport added a subscriber: Unknown Object (MLST).

robchur wrote:

Fixed in SVN trunk, r13955.

The fix for this caused a serious privacy violation, and has
been reverted.

Specifically, calling the hook function (which runs the user
creation log) before setting $wgUser exposed the private IP
addresses of anyone creating an account to being recorded in
recentchanges.

robchur wrote:

Fix was corrected and re-committed.