Author: licsak
Description:
If I try to modify own user page at (ja)Wikipedia, on logged-in, using Firefox
1.5.0.6 / Internet Explorer 6.0 sp2, Mediawiki backs 'index.php' file.
[Contents of "index.php"]
[Process]
Type=Edit text
Engine=MediaWiki
Script=http://ja.wikipedia.org/w/index.php
Server=http://ja.wikipedia.org
Path=/w
Special namespace=特別
[File]
Extension=wiki
URL=http://ja.wikipedia.org/w/index.php?title=%E5%88%A9%E7%94%A8%E8%80%85%E2%80%90%E4%BC%9A%E8%A9%B1:Licsak&action=edit&internaledit=true
(URL:
http://ja.wikipedia.org/w/index.php?title=%E5%88%A9%E7%94%A8%E8%80%85%E2%80%90%E4%BC%9A%E8%A9%B1:Licsak&action=edit&internaledit=true
is editing page to be expectedon logged user.)
But anonymous users CAN modify my user page!
Same behavior occured when I try to edit the article don't have any contents.
Its behavior will not see anonymous users, (i.e. all users not logged in)
and anonymous user can be edit unprotected pages.
Version: 1.7.x
Severity: minor
OS: Windows XP
Platform: PC
URL: (any pages on logged on)