Account creation allowed despite IP blocked with the GlobalBlocking extension
Closed, ResolvedPublic


Patch for 1.18 branch

MediaWiki did not prevent account creation for IP addresses blocked with GlobalBlocking. This was fixed in the attached patch by having the MediaWiki core perform permissions checks which are hooked by GlobalBlocking.

The patch will be released as part of MediaWiki 1.19.2 and 1.18.5.

Version: 1.19.1
Severity: normal

Attached: GlobalBlocking.patch

bzimport added a subscriber: Unknown Object (MLST).
bzimport set Reference to bz39824.
tstarling created this task.Via LegacyAug 31 2012, 2:07 AM
tstarling added a comment.Via ConduitAug 31 2012, 2:08 AM
  • Bug 38333 has been marked as a duplicate of this bug. ***
csteipp added a project: Security.Via WebMar 26 2015, 8:39 PM

Add Comment