Page MenuHomePhabricator
Create Task
Maniphest T31856

Email notification to old address when verified email address is changed or removed
Closed, ResolvedPublic
Actions

Description

If a verified email address is changed or removed, an email notification should be sent to the old address. The email is for informational purposes only, it should not contain any verification codes. The main purpose of this is a reasonable defense against account cracking.

Discussion on en.wp: [[Wikipedia:Village pump (proposals)/Account security#Notify of removal of verified email address]]

Version: unspecified
Severity: enhancement

Details

Reference
bz29856
SubjectRepoBranchLines +/-
User.php: Update 'setEmailWithConfirmation' for notification emailmediawiki/coremaster+32 -2
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedGalorefitzT31856 Email notification to old address when verified email address is changed or removed
 ResolvedkostajhT34281 MediaWiki needs a sane notification system (tracking)
 OpenNoneT34284 Update Echo Notifications in real time without page reloads
 ResolvedNoneT34283 API method to poll centralized notifications
 OpenNoneT113125 Investigate using service workers to provide real-time Echo notifications in the browser (push notifications)
 ResolvedShivanshbindal9T219222 Make notification counts update without page reload
 ResolvedShivanshbindal9T225259 Visual Cue to indicate change in notification count
 OpenNoneT226127 Change the color of Alert/Message indicator.
 ResolvedShivanshbindal9T226130 Display notification text for incoming notification
 ResolvedShivanshbindal9T227501 Change polling rate when document not visible
 ResolvedShivanshbindal9T229732 Define preference for poll updates
 OpenNoneT231697 Notifications auto-updater should be able to get the updates with one API call, not two
 OpenNoneT34285 Email backend for notifications to supplement/consolidate enotif with common notification infrastructure
 DuplicateNoneT34288 Android cloud to device messaging backend for user notification system
 Resolved• JMinorT34287 Apple iOS push notification backend for user notification system
 OpenBUG REPORTNoneT41513 LQT notification email (enotif) are sent for replies/new threads on watchlisted pages/threads regardless of users' enotif settings
 StalledNoneT128351 Notifications should be in core

Event Timeline

• bzimport raised the priority of this task from to Low.Nov 21 2014, 11:27 PM
• bzimport added a project: MediaWiki-Email.
• bzimport set Reference to bz29856.
• bzimport added a subscriber: Unknown Object (MLST).
MER-C created this task.Jul 13 2011, 3:34 AM
• werdna unsubscribed.Dec 10 2014, 6:16 PM
MGChecker subscribed.Jan 14 2016, 3:24 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 14 2016, 3:24 PM
Devirk claimed this task.Jan 14 2016, 5:53 PM
Devirk set Security to None.
Haritha28 subscribed.Jan 14 2016, 5:54 PM
Haritha28 unsubscribed.
Devirk removed Devirk as the assignee of this task.Mar 10 2016, 6:09 AM
Devirk subscribed.
01tonythomas mentioned this in T15303: Implement HTML e-mail support in MediaWiki.Mar 10 2016, 6:11 AM
Galorefitz subscribed.Mar 10 2016, 6:20 AM
Galorefitz claimed this task.Mar 10 2016, 2:16 PM
gerritbot subscribed.Mar 10 2016, 9:08 PM

Change 276563 had a related patch set uploaded (by Galorefitz):
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563

gerritbot added a project: Patch-For-Review.Mar 10 2016, 9:08 PM
Galorefitz added subscribers: Parent5446, 01tonythomas.Mar 18 2016, 11:00 AM

@01tonythomas and @Parent5446 could you please review the submitted patch?

Galorefitz mentioned this in T130490: GSoC/Outreachy proposal for Implementing HTML E-Mail support in MediaWiki.Mar 20 2016, 11:08 AM
gerritbot added a comment.Apr 10 2016, 5:30 AM

Change 276563 merged by jenkins-bot:
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563

Parent5446 closed this task as Resolved.Apr 10 2016, 5:32 AM
ReleaseTaggerBot added projects: MW-1.27-release-notes, MW-1.27-release (WMF-deploy-2016-04-12_(1.27.0-wmf.21)).Apr 10 2016, 6:00 AM
kostajh closed subtask T34281: MediaWiki needs a sane notification system (tracking) as Resolved.Feb 17 2020, 8:47 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL