Page MenuHomePhabricator

Blocked IPs aren't blocked when the user logs out.
Closed, InvalidPublic

Description

Author: muhfugga

Description:
I am User Zenwhat on English Wikipedia. I'm currently blocked for a week. The block window when I'm logged in says that I can't edit because 69.138.16.202 is blocked. When I log out, though, it appears that I can edit Wikipedia, though that shouldn't be the case.

Yesterday my session expired and\or the cookie got lost because I hadn't used Wikipedia in a few days. So, I came back to find that I was logged out. I had to check something. I clicked the "edit" button while logged out and found I could still edit pages.

I did not actually edit anything, but I did not receive the blocked message after clicking "edit". Instead, I just saw the edit screen. Clicking "preview" works, too.

It is possible if I click submit that I may receive the blocked message then, but I don't want to do this because of the possibility that it would be successful. Because even if it's just "test" on WP:Sandbox, technically it's subverting a block and somebody might say, "omg block evading!" and perma-ban me.

My IP address hasn't reset since the session was over. In fact, to test this I actually logged in, so it caught my new IP (in case there was a new IP), then logged out. Again, I was still able to get to the edit window while logged out, even though I'm blocked.

The block window says the IP address "69.138.16.202" is blocked, but that doesn't appear to be the case. It appears that the account, Zenwhat, is blocked, not the IP address.


Version: unspecified
Severity: blocker
OS: Windows Vista
Platform: PC
URL: none

Details

Reference
bz13027

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:07 PM
bzimport set Reference to bz13027.
bzimport added a subscriber: Unknown Object (MLST).

I'm sorry, but I can't reproduce the bug you mentioned. In order to follow this up, can you please report the block id here? Also, make sure you give us the exact IP address(es) you've used recently.

muhfugga wrote:

The block ID? You mean the person who blocked me? It was User:Nakon.

Also, I tested it and yes, only attempts to edit through my account are blocked. When I logged in as Zenwhat (blocked for a week as noted), I can't edit and it says 69.138.16.202 is blocked. It can't be an IP block, though, because it's not blocking my IP when I'm logged out.

Take a look at this:
http://en.wikipedia.org/w/index.php?title=Wikipedia:Sandbox&diff=191821937&oldid=191821449

muhfugga wrote:

Oh, and to clarify, the IP address is 69.138.16.202, the only IP address I've used.

muhfugga wrote:

So, this kind of this is standard? If a person's account is blocked, then they can always just log on and edit? That seems weird. I figured there'd be an auto-block for that kind of thing.

When I click "edit," while logged in, it mentions my IP address.

The block message:

Editing from Zenwhat (your account, IP address, or IP address range) has been disabled by Nakon for the following reason(s):
You have explicitly asked by Jimbo to stop trolling yet you continue to do so on his talk page. Enough is enough.

Your IP address is 69.138.16.202, and the block has been set to expire: 05:41, 19 February 2008.

muhfugga wrote:

*log out

Not log on.

overlordq wrote:

It's a general message, the key part is:

"your account, IP address, or IP address range"

While it does list your IP, this is simply for convenience sake if it was an IP hardblock instead of a softblock.

None the less, changing the policy on blocking IPs in addition to accounts would be beyond the scope of this bug so I'll go ahead and tag it.

Then again, I could be completely wrong.