Feature summary (what you would like to be able to do and where):
Create a restricted-use web interface to allow authorised users to reset account email addresses, with proper logging and support for all valid usernames.
Use case(s) (list the steps that you performed to discover that problem, and describe the actual underlying problem which you want to solve. Do not describe only a solution):
In T399978, an attempt to reset a user's email via the resetUserEmail.php maintenance script failed when the username contained a dollar sign ($). This turned out to be an issue caused by the use of double-quotes in the command line. The underlying problem is that relying on CLI tools for sensitive account actions is error-prone, particularly for usernames with special characters, and requires shell access. There is currently no web-based tool available to perform this action safely and with an audit trail.
Benefits (why should this be implemented?):
- Avoids shell quoting issues and other CLI-related errors
- Enables safer workflows for stewards or system administrators without shell access
- Adds accountability through proper logging
- Provides a more user-friendly, secure way to handle sensitive account changes
See also: T195207: Special page to disable OATH for other users - similar functionality implemented for ease of user adminstration