Page MenuHomePhabricator

Make user_unnamed_ip accessible for temp account creation
Closed, ResolvedPublic

Description

Currently, the variable user_unnamed_ip is always null for the actions createaccount and autocreateaccount. However, I believe that for the creation of temporary accounts (which are autocreateaccount actions), this variable should be accessible.

Use case:

  1. Ban temporary account creation via a specific VPN recently used for abuse, using variables from the IPReputation extension.
  2. Exclude certain IP ranges from this ban.

Currently, this kind of exclusion is impossible and the only way is to nullify the first condition altogether. In addition, temp accounts' IPs can be revealed on Special:Log/newusers, so I don't really see a strong reason to keep user_unnamed_ip inaccessible for temp account creation.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change #1194186 had a related patch set uploaded (by Dragoniez; author: Dragoniez):

[mediawiki/extensions/AbuseFilter@master] Expose user_unnamed_ip for temporary account creations in AbuseLog

https://gerrit.wikimedia.org/r/1194186

Dragoniez claimed this task.
Dragoniez removed a project: Patch-For-Review.

Change #1194186 merged by jenkins-bot:

[mediawiki/extensions/AbuseFilter@master] Expose user_unnamed_ip for temporary account creations

https://gerrit.wikimedia.org/r/1194186