Re: [Mediawiki-l] made an administrator who hasn't yet established an account

2010-08-02 Thread Lewis Cawte
I think they mean where an account has been made and given rights before the user account is logged into, thus making it not a bug. On 03/08/10 01:22, Q wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 8/2/2010 7:18 PM, jida...@jidanni.org wrote: > >> Say, I noticed on Wikia o

Re: [Mediawiki-l] made an administrator who hasn't yet established an account

2010-08-02 Thread Lewis Cawte
On 03/08/10 01:18, jida...@jidanni.org wrote: > Say, I noticed on Wikia one can make a user an administrator, even if he > has never logged in yet. > > This exposes a security risk. A bureaucrat pre-makes some accounts for > future administrators, but before they establish accounts, somebody else >

Re: [Mediawiki-l] made an administrator who hasn't yet established an account

2010-08-02 Thread Q
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 8/2/2010 7:18 PM, jida...@jidanni.org wrote: > Say, I noticed on Wikia one can make a user an administrator, even if he > has never logged in yet. > > This exposes a security risk. A bureaucrat pre-makes some accounts for > future administrators,

[Mediawiki-l] made an administrator who hasn't yet established an account

2010-08-02 Thread jidanni
Say, I noticed on Wikia one can make a user an administrator, even if he has never logged in yet. This exposes a security risk. A bureaucrat pre-makes some accounts for future administrators, but before they establish accounts, somebody else establishes an account with that name, and becomes an in

Re: [Mediawiki-l] Magic word: INCLUDEDPAGENAME?

2010-08-02 Thread Platonides
Scheid, Bernhard wrote: > Is there a magic word or a parameter to a magic word in order to refer to the > pagename of an included page (i.e. to Bar, if you include {{Foo:Bar}} ) ? > > Thx > > Bernhard No. Pagename and friends will refer to the page you are viewing. If you want Bar inside [[Foo:

Re: [Mediawiki-l] Protect tab not working the way I expected

2010-08-02 Thread Platonides
Michael Kingery (HL7) wrote: > I do want to give all logged-in users the right to protect a page. My > understanding is that this setting does not impact who can edit a > protected page. It asks you for that when you protect the page, and I > tell it that I only want sysops to be able to edit the p

[Mediawiki-l] Magic word: INCLUDEDPAGENAME?

2010-08-02 Thread Scheid, Bernhard
Is there a magic word or a parameter to a magic word in order to refer to the pagename of an included page (i.e. to Bar, if you include {{Foo:Bar}} ) ? Thx Bernhard ___ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.o

Re: [Mediawiki-l] MediaWiki version statistics

2010-08-02 Thread Gabriel Filion
On 10-07-30 12:35 AM, Tim Starling wrote: > They make the point that 95% of MediaWiki installations have a > "serious vulnerability" And this is based only on the version tag? Let's not forget that people who install Mediawiki with packages from their distribution are late in terms of version, but

Re: [Mediawiki-l] Protect tab not working the way I expected

2010-08-02 Thread Michael Kingery (HL7)
I'm not sure I understand your suggestion. The list of keys on the protection page are correct, they include the sysops which is what I want to set the page protection level to. I don't need to add anything to that list. The problem is that when I set the page to be protected and editable by only

Re: [Mediawiki-l] Protect tab not working the way I expected

2010-08-02 Thread Michael Kingery (HL7)
I do want to give all logged-in users the right to protect a page. My understanding is that this setting does not impact who can edit a protected page. It asks you for that when you protect the page, and I tell it that I only want sysops to be able to edit the page, but it's allowing anyone to edit

Re: [Mediawiki-l] Associating an openid account with an existing user account

2010-08-02 Thread Anne Wilson
On Monday 02 August 2010 00:07:39 K. Peachey wrote: > We don't have OpenID support by default, Have you installed one of the > extensions to provide this functionality? > Ah - of course! I missed that - sorry! Yes, now I will study the extension page. Thanks for the pointer. Anne -- KDE Commu