https://bugzilla.wikimedia.org/show_bug.cgi?id=18860

           Summary: Special:Emailuser doesn’t check whether user’s IP is
                    blocked
           Product: MediaWiki
           Version: 1.16-svn
          Platform: All
               URL: http://ru.wikipedia.org/wiki/User:Welcome_all
        OS/Version: All
            Status: NEW
          Keywords: easy
          Severity: major
          Priority: Normal
         Component: Special pages
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Users are unable to edit using a blocked IP, but they still can send email that
way — the check in SpecialEmailuser.php doesn’t take it into consideration.

According to a Russian Wikipedia checkuser, this breach is being heavily abused
(spam et al), so this is somewhat urgent.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to