Page MenuHomePhabricator

Do not require login on Special:Confirmemail to confirm the email
Closed, ResolvedPublic

Description

Before gerrit 94406 it was possible to confirm a email code without the need of login to (any) user account. This was changed and produced bug 60433.

In my opinion the old behaviour should be restored.

If not, the logged in user should be checked against the user which gets confirmed, because that can differ at the moment.


Version: 1.23.0
Severity: normal

Details

Reference
bz60434

Event Timeline

bzimport raised the priority of this task from to Normal.
bzimport set Reference to bz60434.

I'm okay with doing this either way.

Change 145511 had a related patch set uploaded by Rohan013:
Login check in Special:Confirmemail was removed

https://gerrit.wikimedia.org/r/145511

Change 145511 had a related patch set uploaded (by Umherirrender):
Do not require login on Special:Confirmemail to confirm the email

https://gerrit.wikimedia.org/r/145511

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 13 2015, 4:37 AM
MZMcBride set Security to None.
matmarex removed a subscriber: matmarex.Aug 13 2015, 1:48 PM
matmarex closed this task as Resolved.Apr 5 2016, 5:09 PM
matmarex removed a project: Patch-For-Review.

Change 145511 merged by jenkins-bot:
Do not require login on Special:Confirmemail to confirm the email

https://gerrit.wikimedia.org/r/145511