https://bugzilla.wikimedia.org/show_bug.cgi?id=37567
Web browser: ---
Bug #: 37567
Summary: [SF] auto-create of red-linked pages disobeys
$wgGroupPermissions to publicly expose anonymous user
IP
Product: MediaWiki extensions
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: Unprioritized
Component: SemanticForms
AssignedTo: [email protected]
ReportedBy: [email protected]
CC: [email protected]
Classification: Unclassified
Mobile Platform: ---
Populating red-linked pages automatically exposes IP addresses of unregistered
site users by creating the pages with their account, even when anonymous
editing is disabled in LocalSettings.php as follows:
# Disable anonymous editing when set to "false"
# http://www.mediawiki.org/wiki/Manual:User_rights
$wgGroupPermissions['*']['edit'] = false;
Here's the relevant doc:
http://www.mediawiki.org/wiki/Extension:Semantic_Forms/Linking_to_forms#Populating_red-linked_pages_automatically
Here's an example:
http://www.coincompendium.com/w/index.php/Special:Contributions/203.87.162.70
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
