Hi all,

Why are locked users can log in via the API? Would have expected that the
users get back the status blocked. It says so in any case in the
documentation. I have a standard SVN installation without extensions or
other modifications. Can anyone confirm this? Below the query and the result
comes from unit testing. It looks like get, but in reality it is a post
request. 

http://unittest.xarax.eu/w/api.php?format=xml&action=login&lgname=unittestin
g02&lgpassword=xxxxx&lgtoken=05b7b7fc4d5d18e389520d5e3ba7f0c2
<?xml version="1.0"?><api xmlns="http://www.mediawiki.org/xml/api/";><login
result="Success" lguserid="3" lgusername="Unittesting02"
lgtoken="ef8fc0d6e4f463e3b2c8d1716d306f5f" cookieprefix="mw_ut_19a"
sessionid="2bce1ed6a491fe957894bab610b77ae4" /></api>

The user is really blocked, like the log says.

12:01, 3. Jun. 2011     Unittesting02 (Diskussion | Beiträge)   unbegrenzt
(Freigeben | Sperre ändern)     Sysadmin (Diskussion | Beiträge | Sperren)
Erstellung von Benutzerkonten gesperrt, darf eigene Diskussionsseite nicht
bearbeiten      (Ungebührliches Verhalten)

I forgot to configure something or is this by design and the documentation
is wrong?

Best regards 
- xarax -


_______________________________________________
Mediawiki-api mailing list
Mediawiki-api@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-api

Reply via email to