Page MenuHomePhabricator

PHP fatal error on MediaWiki installation page with bad input
Closed, ResolvedPublic

Description

Author: nickpj

Description:
On the config/index.php page (i.e. the MediaWiki installation / config page)

Enter Admin Username as: asdasd"'asda;'sd';\\sadsa><d'{asdsa}asd--
Enter other fields to suitable values.
Click "Install MediaWiki".

Resulting output includes this PHP error:

Fatal error: Call to a member function idForName() on a non-object in
/var/www/hosts/mediawiki/phase3/config/index.php on line 802


Version: 1.7.x
Severity: normal
Platform: PC

Details

Reference
bz6531

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:17 PM
bzimport set Reference to bz6531.
bzimport added a subscriber: Unknown Object (MLST).