Page MenuHomePhabricator

Wikimedia contact form does not like + in the email address
Closed, ResolvedPublic

Description

Author: walter

Description:
When you try to send an email to Wikipedia by means of the contact form and use an email address in the style of name+keyword@foobar.invalid then you get a notice that the email address is not correct.

And of course are people using email address in that style.


Version: unspecified
Severity: minor
URL: http://ticket.wikimedia.org/otrs/webform.pl?Language=nl

Details

Reference
bz15624

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:23 PM
bzimport added a project: Znuny.
bzimport set Reference to bz15624.

webform.pl is temporarily disabled due to security issues.

The access logs show virtually no hits to webform.pl. Does anyone actually want it? It needs quite a lot of work.

walter wrote:

Currently is there nothing to be fixed as the form has been taken offline without any notice to the users of it.

I can not speak for the others but for the Dutch language queue has always used it since it exists, far before OTRS, used a contact form. This form was used for close to 100% of all contacts.

You must have removed the links to it before I set up the logging. Can you give me an idea of what alternative contact method you're using now? I need to know how much you need this, for prioritisation.

walter wrote:

Well, as soon as I discoverd the contactform was gone I removed all links to it. Now we just list on a page the email adress people need to send an email to. Before the WMF provided this contact form I used to run one since the start of email service in 2003 it was I believe. I could setup again a contact form if the WMF does not come back soon.

It is more easy a contactform for the users to contact us but mostly the fact you have cleary the ipadress of the sender of the email in the email that why is very usefull to lookup things on the wiki. Also the browser string is useful info in some cases.

If you have an open source contact form already that fits your needs, or you're willing to write one, I'd be happy to review it and put it on our servers if it looks OK. The OTRS one had a security vulnerability for every few lines of code. I told the developers about it but I haven't gotten any interest from them about fixing it.

Maybe http://www.mediawiki.org/wiki/Extension:ContactPage could fit your needs.

The exension is enabled on a WMF wiki already: http://wikimediafoundation.org/wiki/Special:Contact but I think it needs a review before it can used on bigger projects.

mwpnl wrote:

(In reply to comment #7)

Maybe http://www.mediawiki.org/wiki/Extension:ContactPage could fit your needs.

The exension is enabled on a WMF wiki already:
http://wikimediafoundation.org/wiki/Special:Contact but I think it needs a
review before it can used on bigger projects.

That form looks very hopefull. I do entreat on a quick implementation of this - or any other form. Before the disabling I recieved aprox. 5~6 tickets a day on info-nl. Without the contact-form, the numbers have dropt to about 1 or 2 every day.

So for nl-wikipedia this is a very useful page, and I don't really care if it's the "real" OTRS-form, the Tim-version, Walter-version or the Extension-version, but enable at least one of the options.

Mark

I've reviewed ContactPage and it looks just fine. It sends mail to the email address registered to a given user. Can you create a user with its mail address set correctly, and also translate this variable?

$wgContactSenderName = 'Contact Form on Wikipedia';

mwpnl wrote:

(In reply to comment #9)

I've reviewed ContactPage and it looks just fine. It sends mail to the email
address registered to a given user. Can you create a user with its mail address
set correctly, and also translate this variable?

$wgContactSenderName = 'Contact Form on Wikipedia';

Great Tim, thanks!
I created the user WikiAdmin on nl-Wikipedia, with the e-mail set to info-nl@wikimedia.org

The translation should be:

$wgContactSenderName = 'Contactformulier op nl-Wikipedia';

(for the record, OTRS#2009022010039151 contains the password).

Mark

mwpnl wrote:

Would it be possible to add a feature that automatically sends the IP-address of the contactor if a request by this form is being send? The old OTRS-contactform had this feature and made it easier for us to handle requests concerning IP-users. After all, most IP-users ask why a certain IP-address is blocked or why they got a vandalism-warning.

At this moment we have to reply back with a question asking them what their IP-address is, it would be more helpful if we’d get this info with the e-mail.

If this isn’t possible due to privacy concerns, please just add a line to the contact-form saying something like: “If you don’t own a Wikipedia-username, it might be helpful to send your IP-address along with your inquiry, your IP-address is: xxx.xxx.xxx.xxx”.

Thanks in advance!
MarkW

Reclosing as FIXED, as the original request has been taken care of. Enhancement requests to the ContactPage extension should be filed as their own bugs (although I'm leery about nabbing IPs and putting them in the e-mail).