Page MenuHomePhabricator

Ignore password reminder requests from blocked IP addresses
Closed, ResolvedPublic

Description

Author: titoxd.wikimedia

Description:
As discussed on the English Wikipedia's Technical Vilage Pump
(http://en.wikipedia.org/wiki/Wikipedia:Village_pump_%28technical%29#Abuse_of_password_requests),
blocked anonymous users are spamming sysops by requesting password reminders, in
an effort to annoy the heck out of them. As there is no clear need for that
feature while blocked, they should not be able to do so.


Version: unspecified
Severity: enhancement
URL: http://en.wikipedia.org/wiki/Wikipedia:Village_pump_%28technical%29#Abuse_of_password_requests

Details

Reference
bz5799

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:13 PM
bzimport set Reference to bz5799.
bzimport added a subscriber: Unknown Object (MLST).

robchur wrote:

I'd be inclined to merge this with bug 5370 and use the rate limit. Using the
block would prevent legit users stuck behind AOL or some other stupid
arrangement from logging in to change preferences, etc.

*** This bug has been marked as a duplicate of 5370 ***