Page MenuHomePhabricator

Unregistered editors on blocked ranges need a way to interact on-wiki to appeal a block
Open, MediumPublic1 Estimated Story Points

Description

Summary

Users on blocked ranges cannot create a temporary account and engage on wiki to appeal a block. This is problematic.

Background

Without temporary accounts enabled, if someone is blocked due to their IP address being blocked, they can appeal their block via their talk page, if the block allows users to edit their own talk pages. They may be:

  • A logged in user
  • A pre-existing temporary account
  • A logged out IP user, in which case their talk page is User_talk:<their IP address>

In this situation, with temporary accounts enabled:

  • A logged in user can still edit their own talk page
  • A pre-existing temporary account can still edit their own talk page
  • A logged out IP user can no longer edit. Special:MyTalk will direct them to log in. If they manage to find User_talk:<their IP address>, they will not be allowed to edit it since it is not their talk page (at the point when they try to edit, they are identified as a placeholder temporary account, so they have no talk page)

So with temporary accounts being deployed there is no onwiki way to request unblocking for unregistered users without a temporary account affected by an IP (range) block.
Pre-temp accounts users affected by IP (range) blocks can still request IPBE on their user talk page unless that option is specifically disabled. That’s also true for users with active temporary accounts. Here's what that looks like on the block form (bottom checkbox):

image.png (272×998 px, 49 KB)

However, if a user doesn't have a temp account already there’s no way for them to write on their user talk page because every block by default also prevents temp account creation.

Reported on wiki.

Specifications

From an end user perspective it would be good to keep as much consistency as possible with workflow for IP editors.

Proposed new workflow for editors experiencing the block:

  • If the option "Prevent this user from editing their own talk page while blocked" is not checked, an unregistered editor on a blocked range should be able to follow a link such as Special:MyTalk that displays a warning similar to the messaging we show for new would-be temporary account holders, and a button.
  • On pressing the button, a temporary account is created and the user is redirected to the talk page.
    • Note that the temporary account will not actually exist until the user pressed the button.
  • The user is able to interact with their talk page, as would have happened before temporary accounts were enabled. They are not able to edit other pages.
  • If the temporary account holder moves to a different wiki where their IP/range is not blocked, they can edit as a regular non-blocked temporary account.
  • If the temporary account holder moves to a different wiki where their IP/range is blocked, they will be subject to the conditions of the local block (i.e. whether or not talk page editing is allowed for example).
  • There is no change in workflow for globally blocked users. They will be able to follow instructions as laid out on meta: https://meta.wikimedia.org/wiki/Global_blocks/FAQ
Design

image.png (1×2 px, 278 KB)

ComponentCopy
Page titleAppeal this IP block
Page contentYour IP address is blocked from editing. Pressing continue will create a temporary account. You can then edit your temporary talk page to appeal this block.
ButtonContinue
Instrumentation
  • Clicking the button should generate a Logstash entry with the temporary account name, indicating that this mechanism was used
Notes

Existing established workflows for handling blocked users on IPs/IP ranges will apply for temp accounts. Some examples of this:

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes

@XXBlackburnXx pointed out on Discord that custom versions of MediaWiki:Blockedtext are not shown to mobile users which might be a separate issue to fix because the default text doesn't provide any useful way for logged-out users to ask for help / request unblocking.

@Johannnes89 @XXBlackburnXx I filed this as T400465: Blocked users on mobile should be able to follow a clear path to appeal their block

Tchanders set the point value for this task to 1.Jul 29 2025, 6:40 AM

Change #1173969 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/core@master] WIP SpecialMytalk: Allow creating a temporary user to appeal a block

https://gerrit.wikimedia.org/r/1173969

Change #1173990 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/core@master] Add SpecialMytalkTest to test SpecialMytalk

https://gerrit.wikimedia.org/r/1173990

Change #1173990 merged by jenkins-bot:

[mediawiki/core@master] Add SpecialMytalkTest to test SpecialMytalk

https://gerrit.wikimedia.org/r/1173990

Change #1174549 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/core@master] AuthManager: Add context param to method for setting context user

https://gerrit.wikimedia.org/r/1174549

Change #1174549 abandoned by Tchanders:

[mediawiki/core@master] AuthManager: Add context param to method for setting context user

Reason:

As per comment

https://gerrit.wikimedia.org/r/1174549

Change #1175526 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/core@master] Add context parameter for testing special pages

https://gerrit.wikimedia.org/r/1175526

Change #1175527 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/core@master] Add a test for SpecialMytalk in temp user IP block appeal mode

https://gerrit.wikimedia.org/r/1175527

Change #1173969 merged by jenkins-bot:

[mediawiki/core@master] SpecialMytalk: Allow creating a temporary user to appeal a block

https://gerrit.wikimedia.org/r/1173969

Tchanders lowered the priority of this task from High to Medium.Aug 5 2025, 3:34 PM

Moving to QA while we wait for the test patches to merge, to clear the review column. (Should be possible to QA without those anyway.)

Change #1175526 merged by jenkins-bot:

[mediawiki/core@master] Add context parameter for testing special pages

https://gerrit.wikimedia.org/r/1175526

Change #1175527 merged by jenkins-bot:

[mediawiki/core@master] Add a test for SpecialMytalk in temp user IP block appeal mode

https://gerrit.wikimedia.org/r/1175527

Maybe this is worth a User-notice, to inform communities of this way in which temp accounts can appeal a block on their IP address (in case communities would want to e.g. edit their blockedtext message overrides to account for this)? xref T401506#11169563 onwards

I've got an inquiry from another jawiki admin, who said "I just saw a temporary account created from a blocked IP that's banned from creating accounts. Why is this happening?".

I tested this on my local MW installation, and the logs do indeed look confusing:

Temp account creations from blocked IP.png (120×938 px, 37 KB)

To resolved this, I think we need to:

  • Add a tag to the logs for account creations made through blocked IPs
  • Apply stricter throttling to bypassed creations

Another idea is to require the blocked user to create an appeal and fill a textbox before letting them create a temporary account. This way, we can prevent abuse like creating random temporary accounts and logging out immediately afterwards.

@Dragoniez Is the issue that vandals from blocked ranges can repeatedly create talk pages as a form of abuse?

We have recently introduced a stronger throttle on temp account creations which might help to some extent- see T405565: Throttle temporary account creation.
@Tchanders can you confirm is the 1 / 10 minute throttle will also apply in this case?

@Dragoniez Is the issue that vandals from blocked ranges can repeatedly create talk pages as a form of abuse?

We have recently introduced a stronger throttle on temp account creations which might help to some extent- see T405565: Throttle temporary account creation.
@Tchanders can you confirm is the 1 / 10 minute throttle will also apply in this case?

@Niharika Oh, I wasn't aware of that task. AFAICT the throttling also applies to temp account creations via Special:Mytalk, so please forget about the throttling part.

That said, I think it would be helpful if front-end users could tell when an autocreation originates from the special page, since a temp account created from a creation-blocked IP address can look confusing to them. It might be beneficial to add a system-defined tag to such creation logs to make this clearer.

Change #1211094 had a related patch set uploaded (by Dragoniez; author: Dragoniez):

[mediawiki/core@master] AuthManager: Make it possible to tag auto-creation logs

https://gerrit.wikimedia.org/r/1211094

dom_walden subscribed.

I can confirm the points from Specification on testwiki and test2wiki. Also, if I am not blocked and go to Special:MyTalk, I am redirected to the login page.

Change #1211147 had a related patch set uploaded (by Dragoniez; author: Dragoniez):

[mediawiki/core@master] [WIP] Apply "IP block appeal" tag to temporary account creations via Special:Mytalk

https://gerrit.wikimedia.org/r/1211147

Change #1211094 merged by jenkins-bot:

[mediawiki/core@master] AuthManager: Make it possible to tag auto-creation logs

https://gerrit.wikimedia.org/r/1211094

Change #1211147 merged by jenkins-bot:

[mediawiki/core@master] Apply "IP block appeal" tag to temporary account creations via Special:Mytalk

https://gerrit.wikimedia.org/r/1211147

Thank you @Dragoniez !

Sure thing. Thanks for the review :)

One edge-case of the new IP block appeal tagging might be to do with partial-blocks. It seems like the current logic in SpecialMytalk.php might react to any blocks on an underlying IP address, not just sitewide blocks. So then, now that we also have the new tag, it seems like we're getting cases where:

cc @Dragoniez @Tchanders


Maybe this is worth a User-notice, to inform communities of this way in which temp accounts can appeal a block on their IP address (in case communities would want to e.g. edit their blockedtext message overrides to account for this)? xref T401506#11169563 onwards

Given T377771#11493552, IMO this feature could maybe benefit from an announcement in Tech/News. Boldly tagging as such :)

Change #1224988 had a related patch set uploaded (by Dragoniez; author: Dragoniez):

[mediawiki/core@master] Add check for account creation blocks to temporary account creation via Special:Mytalk

https://gerrit.wikimedia.org/r/1224988

Given T377771#11493552, IMO this feature could maybe benefit from an announcement in Tech/News. Boldly tagging as such :)

@A_smart_kitten thanks! @Tchanders how might we word this for Tech News?

One edge-case of the new IP block appeal tagging might be to do with partial-blocks. It seems like the current logic in SpecialMytalk.php might react to any blocks on an underlying IP address, not just sitewide blocks. So then, now that we also have the new tag, it seems like we're getting cases where:

cc @Dragoniez @Tchanders

Thanks for spotting this. And I’m especially glad you did, because without the front-end edit tag, this would have been very hard to notice on-wiki :)

Given T377771#11493552, IMO this feature could maybe benefit from an announcement in Tech/News. Boldly tagging as such :)

@A_smart_kitten thanks! @Tchanders how might we word this for Tech News?

I think T377771#11493552 captures it pretty well:

Logged out users should be able to use the default unblock process via user talk page even without already having a TA: T398673: Unregistered editors on blocked ranges need a way to interact on-wiki to appeal a block allows creating a TA for user talk page appeals even on blocked IPs / IP ranges (unless „prevent this user from editing their own talk page“ is enabled).

Further details in this task description. Hope that helps!

Given T377771#11493552, IMO this feature could maybe benefit from an announcement in Tech/News. Boldly tagging as such :)

@A_smart_kitten thanks! @Tchanders how might we word this for Tech News?

I think T377771#11493552 captures it pretty well:

Logged out users should be able to use the default unblock process via user talk page even without already having a TA: T398673: Unregistered editors on blocked ranges need a way to interact on-wiki to appeal a block allows creating a TA for user talk page appeals even on blocked IPs / IP ranges (unless „prevent this user from editing their own talk page“ is enabled).

Further details in this task description. Hope that helps!

@Tchanders Thanks for providing the wording. I am guessing this is ready for Tech News.

Change #1224988 merged by jenkins-bot:

[mediawiki/core@master] Limit mw-ipblock-appeal tag application to sitewide account-creation blocks

https://gerrit.wikimedia.org/r/1224988