User "Aaron Schulz" posted a comment on MediaWiki.r92924. Full URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/92924#c20069 Commit summary:
* Moved email changing from sp:Preferences to new sp:ChangeEmail, which requires confirming the user password. This reduces the impact of session hijacking, which was increased slightly with r86482. Changing a password already required confirming the old one. This change closes the loophole of changing the email address and then doing a reset. * Parse 'mailerror' message correctly Comment: I had it lower case, but then I noticed prefs had it upper case and stuck with that. _______________________________________________ MediaWiki-CodeReview mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview
