Project Information
- Name of tool/project: LoginNotify
- Project home page: https://mediawiki.org/wiki/Extension:LoginNotify
- Name of team requesting review: Security
- Primary contact: @Bawolff
- Target date for deployment: Whenever.
Maybe end of July - Link to code repository / patchset: rELGN (or gerrit mediawiki/extension/LoginNotify.git)
- Programming Language(s) Used: PHP
Note, since @Bawolff wrote the extension, someone who is not @Bawolff should review it.
Description of the tool/project
Give echo notifications whenever someone attempts to login but gives wrong password.
Extension tries to determine if the user is coming from a previously used address, and is more sensitive in that case.
Has option to send email notices any time someone logs in from an address not previously used.
Description of how the tool will be used at WMF
Allow people to detect if someone is trying to break into their account
For background see T11838
Has this project been reviewed before?
no
Working test environment
Standard MediaWiki extension. git clone the repo. wfLoadExtension( 'LoginNotify' );
Post-deployment
Security team I guess