Do not require login on Special:Confirmemail to confirm the email
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Umherirrender
	Jan 25 2014, 9:56 PM

Description

Before gerrit 94406 it was possible to confirm a email code without the need of login to (any) user account. This was changed and produced bug 60433.

In my opinion the old behaviour should be restored.

If not, the logged in user should be checked against the user which gets confirmed, because that can differ at the moment.

Version: 1.23.0
Severity: normal

	Subject	Repo	Branch	Lines +/-
	Do not require login on Special:Confirmemail to confirm the email	mediawiki/core	master	+1 -2

Mentioned In: T130490: GSoC/Outreachy proposal for Implementing HTML E-Mail support in MediaWiki
T15303: Implement HTML e-mail support in MediaWiki

• bzimport raised the priority of this task from to Medium.Nov 22 2014, 3:02 AM

• bzimport set Reference to bz60434.

I'm okay with doing this either way.

Change 145511 had a related patch set uploaded by Rohan013:
Login check in Special:Confirmemail was removed

Change 145511 had a related patch set uploaded (by Umherirrender):
Do not require login on Special:Confirmemail to confirm the email

• MZMcBride set Security to None.

matmarex closed this task as Resolved.Apr 5 2016, 5:09 PM

Change 145511 merged by jenkins-bot:
Do not require login on Special:Confirmemail to confirm the email