Page MenuHomePhabricator

Blocked users cannot find password reset functionality
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • if you're on a VPN which has been deemed bad and wrong (ip range block)
  • the password reset link is removed from Special:UserLogin and ther is no indication of why.

What happens?:
You have to happen to find Special:PasswordReset, where it will say "Your IP address is blocked from editing. To prevent abuse, it is not allowed to use password recovery from this IP address."

What should have happened instead?:
The password reset checks if you are allowed to reset a password. There should be no reason to hide the link to the password reset from users that are blocked.

Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):

Other information (browser name/version, screenshots, etc.):

Event Timeline

Change #1189982 had a related patch set uploaded (by TheDJ; author: TheDJ):

[mediawiki/core@master] Login page: make password reset discoverable for blocked users

https://gerrit.wikimedia.org/r/1189982

TheDJ triaged this task as Low priority.Sep 21 2025, 7:48 PM
TheDJ added a project: User-TheDJ.

Change #1189982 merged by jenkins-bot:

[mediawiki/core@master] Login page: make password reset discoverable for blocked users

https://gerrit.wikimedia.org/r/1189982