Some people are not aware of this, and they use templates to style Mediawiki messages. If the administrator forgets to protect the template, it opens up a backdoor for other users to edit the message.
Techman224 On 2013-04-20, at 4:25 AM, Petr Kadlec <[email protected]> wrote: > On 20 April 2013 07:08, Techman224 <[email protected]> wrote: > >> Right now the MediaWiki namespace is protected from editing. However, if >> you add a template to a Mediawiki message and the template is unprotected, >> any user could edit the message by editing the template, creating a >> backdoor. >> > > Ummm... Don't do that, then? Sometimes you _want_ to include pieces of text > editable by more than just sysops (say, by autoconfirmed users), so you use > a template from a MediaWiki message. (Cf. e.g. > https://cs.wikipedia.org/wiki/MediaWiki:Recentchangestext and > https://cs.wikipedia.org/wiki/%C5%A0ablona:Ozn%C3%A1men%C3%ADRC.) Or, you > do not want to do that, then why are you using an unprotected template? > Either transclude another page in MediaWiki namespace as a template > ({{MediaWiki:Something}}), or make sure you protect the used template (with > possible cascade). > > -- [[cs:User:Mormegil | Petr Kadlec]] > _______________________________________________ > Wikitech-l mailing list > [email protected] > https://lists.wikimedia.org/mailman/listinfo/wikitech-l _______________________________________________ Wikitech-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikitech-l
