Page MenuHomePhabricator

The checkuser-action-reset message incorrectly indicates a successful password reset when it just is used to indicate that a password reset email was sent
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • Send a password reset email for an account using Special:ResetPassword
  • Run CheckUser on the IP / account used to make the password reset
  • Observe that the message says "reset password for user ..."

What happens?:
This incorrectly indicates that the user had their password reset

What should have happened instead?:
The message should instead be that a password reset email was sent for that user.

Software version (skip for WMF-hosted wikis like Wikipedia):
Checkuser on the master branch on enwiki.

Event Timeline

Change 854650 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/CheckUser@master] Fix the wording used by the checkuser-reset-action message

https://gerrit.wikimedia.org/r/854650

Change 854650 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] Fix the wording used by the checkuser-reset-action message

https://gerrit.wikimedia.org/r/854650

Umherirrender assigned this task to Dreamy_Jazz.
Umherirrender removed a project: Patch-For-Review.