https://bugzilla.wikimedia.org/show_bug.cgi?id=57289
T. Gries <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|normal |major --- Comment #6 from T. Gries <[email protected]> --- (In reply to comment #5) > Is this still happening? I'm not able to reproduce it. Just to confirm, > > * I enter my username and temp password, click login > * I get the change password form. I'm not logged in. Old password is > pre-filled. > * I enter in a new password (twice), and click submit. > * I'm taken back to Main_Page, and I'm logged in. > > Am I missing a step? Yes, certainly. I still can reproduce my findings as in the first comment, and as confirmed by André in https://bugzilla.wikimedia.org/show_bug.cgi?id=57289#c3 Please reproduce step-by-step: Scenario: + en.wikipedia.org as of 2013-11-22 + go to "Reset Password" page and trigger the I-forgot-my-passwort e-mail-password mail + come back to the login page + enter the temporary password + you are now correctly asked to change your password (=mandatory password change after login with temporary password) + after a successful password change you will see "Change Password" (=page title) "You must be logged in to access this page directly." URL is: "https://en.wikipedia.org/w/index.php?title=Special:ChangePassword&returnto=&returntoquery=&fromhttp=1"; This is *strictly* reproducible. Raising severity to "major" because it relates to a password issue, which could point to critical bug. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
