Page MenuHomePhabricator

changePassword.php should have the option to take the password through stdin
Closed, ResolvedPublicFeature

Description

currently to use changePassword.php you have to pass in the new password as an argument to the script.

This is not really ideal on servers with multiple admins, and it also leaves the plaintext password on your shell history, which you later have to remove it from. Reading the password from stdin also prevents the admin from ever seeing the password depending on how it is used.

Therefore, I think the script should have the option to take in this password via standard input instead.

Event Timeline

Aklapper changed the subtype of this task from "Task" to "Feature Request".Oct 25 2024, 6:29 PM

Change #1101029 had a related patch set uploaded (by Alejandro Alcaide; author: Alejandro Alcaide):

[mediawiki/core@master] Add an option for changePassword.php to read the password through stdin

https://gerrit.wikimedia.org/r/1101029

Change #1101029 merged by jenkins-bot:

[mediawiki/core@master] Add an option for changePassword.php to read the password through stdin

https://gerrit.wikimedia.org/r/1101029

Pskyechology subscribed.

Since this has a merged patch, I'll be marking it as resolved.

Change #1216567 had a related patch set uploaded (by Hashar; author: Hashar):

[mediawiki/core@master] maintenance: changePassword: fix input termination

https://gerrit.wikimedia.org/r/1216567