Able to edit pages without confirming email address
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Apr 6 2013, 5:37 PM

Description

Author: testingwithfire

Description:
I just created an account and supplied an email address (testbruno, testingwithfire at gmail dot com).

The account creation was successful and I was able to edit a page without ever checking my email for a confirmation notice.

I understand that this is expected behavior but I think that a confirmation email is an important security feature - I don't want somebody using my email address to be editing Wikipedia articles!

Version: unspecified
Severity: normal

Details

Reference: bz46957

Event Timeline

• bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 1:18 AM

• bzimport added a project: MediaWiki-User-login-and-signup.

• bzimport set Reference to bz46957.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.Apr 6 2013, 5:37 PM

You only need to confirm your e-mail address to use e-mail related features, like receiving e-mail notifications or sending (and being able to receive) e-mail via Special:Emailuser.

And since e-mails for accounts need not be unique, even if somebody does provide your address in preferences, it won't be in any way visible to anyone but themselves, and it won't cause any issues until they confirm it (which they obviously couldn't do).

Able to edit pages without confirming email addressClosed, DeclinedPublicActions

Description

Details

Event Timeline

Able to edit pages without confirming email address
Closed, DeclinedPublic
Actions