Account creation allowed despite IP blocked with the GlobalBlocking extension
Closed, ResolvedPublic


Patch for 1.18 branch

MediaWiki did not prevent account creation for IP addresses blocked with GlobalBlocking. This was fixed in the attached patch by having the MediaWiki core perform permissions checks which are hooked by GlobalBlocking.

The patch will be released as part of MediaWiki 1.19.2 and 1.18.5.

Version: 1.19.1
Severity: normal

Attached: GlobalBlocking.patch

bzimport added a subscriber: wikibugs-l.
bzimport set Reference to bz39824.
tstarling created this task.Via LegacyAug 31 2012, 2:07 AM
tstarling added a comment.Via ConduitAug 31 2012, 2:08 AM
  • Bug 38333 has been marked as a duplicate of this bug. ***
csteipp added a project: Security.Via WebThu, Mar 26, 8:39 PM

Add Comment

Column Prototype
This is a very early prototype of a persistent column. It is not expected to work yet, and leaving it open will activate other new features which will break things. Press "\" (backslash) on your keyboard to close it now.