Page MenuHomePhabricator

Api allows reblocking the user if reblock parameter is not specified
Closed, ResolvedPublic

Description

Author: beau

Description:
When block requests are issued one after another (they do not have to be concurrent!) I am able to reblock user without reblock parameter.

7 of total 9 attempts were successful.

The request is as follows:
'action' => 'block',
'user' => "127.0.0.2",
'expiry' => '2 hours',
'reason' => 'reason',
'anononly' => 1,
'nocreate' => 1,
'token' => 'xxx',


Version: 1.18.x
Severity: normal
URL: https://test.wikipedia.org/w/index.php?title=Special:Log&dir=prev&offset=20111115195451&limit=7&type=block&user=Beau&page=User%3A127.0.0.2&month=&year=

Details

Reference
bz32434
TitleReferenceAuthorSource BranchDest Branch
jenkins-rel: updating plugin versions to address vulnerabilitiesrepos/releng/jenkins-deploy!37jnucheupdate-pluginsmaster
Customize query in GitLab

Event Timeline

bzimport raised the priority of this task from to Low.Nov 22 2014, 12:06 AM
bzimport set Reference to bz32434.
bzimport added a subscriber: Unknown Object (MLST).

It's not the API at fault, it just packages the parameters and passes them to SpecialBlock::processForm()

(In reply to comment #2)

I have submitted a change
https://gerrit.wikimedia.org/r/#q,I29275eb4b5f425b7382ba8b7dec050209878f81b,
n,z
for review.

Approved by Aaron Schulz on the 20th.

  • Bug 43634 has been marked as a duplicate of this bug. ***