Page MenuHomePhabricator

oldid isn't checked against article name
Closed, ResolvedPublic

Description

Author: timwi

Description:
BUG MIGRATED FROM SOURCEFORGE
http://sourceforge.net/tracker/index.php?func=detail&aid=622636&group_id=34373&atid=411192
Originally submitted by Nobody/Anonymous - nobody 2002-10-13 17:19

When the software renders a URI containing 'oldid', it
does not check that the revision number corresponds to
a version of the article requested. So one can induce
Wikipedia to display a misleading page such as:

http://www.wikipedia.org/w/wiki.phtml?title=User:Lee_Daniel_Crocker&oldid=269768

  • Additional comments ------------------------

Date: 2002-10-14 02:16
Sender: SF user vibber

Uhh.. undocumented feature? ;)

Actually, The ability to do a diff between two different
pages could be pretty handy from time to time. But, the

interface should probably reflect it if it's allowed.

Date: 2002-11-29 22:31
Sender: SF user tobybartels

Brion's right; we should allow diffs between a version of an
article at a new name and a version of what was the same
article but at an old name (in some context where moving the
page didn't work). A warning at the top of the displayed
diff page should be sufficient.


Date: 2004-05-08 13:09
Sender: SF user dittaeva

I tried to see if this thing still is true. So here goes.

Am I right when assuming that the reported bug here was that
one could do a diff between to different versions of different
articles, and that it was (rightly, in my opinion) really a desired
feature just missing some implementation?

When updating the supplied link from www to en, I get the
latest version of the User:Lee_Daniel_Crocker page.

So I tried to do a diff between an old version of the "User:
Lee_Daniel_Crocker" article and a new version of the
"Philosophy" article:
http://en.wikipedia.org/w/wiki.phtml?title=User:
Lee_Daniel_Crocker&dummy=1&diff=227737&oldid=3365750

and it works!

But I see that this is a result from link tricking that has not
been implemented and as one can only do it by link tricking I

suppose it is not necessary to do anything about it.

Date: 2004-05-11 11:52
Sender: SF user vibber

I've checked in a change to 1.3 that will show the actual names
of both
specified pages on these trick URLs. ie, for the title it'll
show:

Philosophy, User:Lee Daniel Crocker

Still no UI for getting at it, but it'll look nicer while you're
there. (This
was a side effect of fixing bug #950911; I had to check the titles
for
security, and then why not show them?) There may still be oddities,
so
I'm leaving the bug open for now.


Version: unspecified
Severity: normal

Details

Reference
bz355

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 6:53 PM
bzimport set Reference to bz355.
bzimport added a subscriber: Unknown Object (MLST).