Account creation allowed despite IP blocked with the GlobalBlocking extension
Closed, ResolvedPublic

Description

Patch for 1.18 branch

MediaWiki did not prevent account creation for IP addresses blocked with GlobalBlocking. This was fixed in the attached patch by having the MediaWiki core perform permissions checks which are hooked by GlobalBlocking.

The patch will be released as part of MediaWiki 1.19.2 and 1.18.5.


Version: 1.19.1
Severity: normal

Attached: GlobalBlocking.patch

Details

Reference
bz39824
bzimport set Reference to bz39824.
bzimport added a subscriber: Unknown Object (MLST).
  • Bug 38333 has been marked as a duplicate of this bug. ***

Add Comment