User "Duplicatebug" posted a comment on MediaWiki.r92924. Full URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/92924#c24372 Commit summary:
* Moved email changing from sp:Preferences to new sp:ChangeEmail, which requires confirming the user password. This reduces the impact of session hijacking, which was increased slightly with r86482. Changing a password already required confirming the old one. This change closes the loophole of changing the email address and then doing a reset. * Parse 'mailerror' message correctly Comment: You have removed the 'help-messages' from option 'emailaddress'. Please add this back or remove the corresponding messages from the MessageFile. Thanks. _______________________________________________ MediaWiki-CodeReview mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview
