Account creation allowed despite IP blocked with the GlobalBlocking extension
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	tstarling
	Aug 31 2012, 2:07 AM

Description

Patch for 1.18 branch

MediaWiki did not prevent account creation for IP addresses blocked with GlobalBlocking. This was fixed in the attached patch by having the MediaWiki core perform permissions checks which are hooked by GlobalBlocking.

The patch will be released as part of MediaWiki 1.19.2 and 1.18.5.

Version: 1.19.1
Severity: normal

Attached:

GlobalBlocking.patch775 BDownload

Details

Reference: bz39824

Event Timeline

• bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 12:52 AM

• bzimport added projects: MW-1.19-release, MediaWiki-User-management.

• bzimport set Reference to bz39824.

• bzimport added a subscriber: Unknown Object (MLST).

tstarling created this task.Aug 31 2012, 2:07 AM

Bug 38333 has been marked as a duplicate of this bug. ***

• csteipp added a project: acl*security.Mar 26 2015, 8:39 PM

• chasemp added a project: Security.Feb 10 2020, 10:53 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:14 PM

Account creation allowed despite IP blocked with the GlobalBlocking extensionClosed, ResolvedPublicActions

Description

Details

Event Timeline

Account creation allowed despite IP blocked with the GlobalBlocking extension
Closed, ResolvedPublic
Actions