https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #26 from T. Gries 2012-02-12 09:33:33 UTC ---
Here are all the essentials for Developers https://www.mediawiki.org/wiki/MVL
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving thi
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #25 from T. Gries 2012-02-12 09:32:16 UTC ---
(In reply to comment #24)
> Strange, I did perform an 'svn up' to the codebase before creating the patch.
> Will take care regarding the coding conventions.
I only found that the line n
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
Aashish Mittal changed:
What|Removed |Added
CC||ashishmittal.m...@gmail.com
--- Comme
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
T. Gries changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #22 from Aashish Mittal 2012-02-12
07:46:24 UTC ---
Created attachment 9992
--> https://bugzilla.wikimedia.org/attachment.cgi?id=9992
Modification to Special:PasswordReset to preset the username field
Hello,
I have added a patc
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
T. Gries changed:
What|Removed |Added
See Also||https://bugzilla.wikimedia.
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #21 from T. Gries 2011-08-02 06:56:53 UTC ---
(In reply to comment #20)
> when implementing this, check against effects from or to
> https://bugzilla.wikimedia.org/show_bug.cgi?id=20185 .
Tested ok, no negative side effects found (
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
T. Gries changed:
What|Removed |Added
See Also||https://bugzilla.wikimedia.
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
Happy-melon changed:
What|Removed |Added
Component|Special pages |OpenID
Version|1.19-svn
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #18 from Happy-melon 2011-06-10
22:20:42 UTC ---
(In reply to comment #17)
> > for wikis to require an email address for password resets, which 'closes'
> > the
> > vulnerability if wikis are concerned about it. 'Fixing' this for
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #17 from T. Gries 2011-06-10 19:39:47 UTC ---
> for wikis to require an email address for password resets, which 'closes' the
> vulnerability if wikis are concerned about it. 'Fixing' this for the sake of
> fixing it is definitely
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #16 from Happy-melon 2011-06-09
14:50:01 UTC ---
(In reply to comment #13)
> (In reply to comment #12)
> > In ordinary vanilla MediaWiki, a non-sysop User X cannot be *prevented* from
> > triggering password reset for User Y, becau
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #15 from T. Gries 2011-06-09 12:52:09 UTC ---
Tim, Brion: only for test purposes, I have sent you PasswortReset, too. (Will
not do this again. It was only for demonstrating, that this should be fixed)
--
Configure bugmail: https:/
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #14 from T. Gries 2011-06-09 12:50:22 UTC ---
This hole is what I wished it would be closed by you experts (not by me as
newbie)
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receivin
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #13 from T. Gries 2011-06-09 12:49:11 UTC ---
(In reply to comment #12)
> In ordinary vanilla MediaWiki, a non-sysop User X cannot be *prevented* from
> triggering password reset for User Y, because User X can simply log out and
> b
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #12 from Happy-melon 2011-06-09
10:41:15 UTC ---
In ordinary vanilla MediaWiki, a non-sysop User X cannot be *prevented* from
triggering password reset for User Y, because User X can simply log out and
become Nobody. Therefore the
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #11 from T. Gries 2011-06-09 05:26:25 UTC ---
(In reply to comment #10)
> (In reply to comment #9)
> >
> > In any event, maybe Special:PasswordReset should do the same thing, but I
> > don't
> > see what the benefit of making the
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #10 from T. Gries 2011-06-09 05:24:20 UTC ---
(In reply to comment #9)
>
> In any event, maybe Special:PasswordReset should do the same thing, but I
> don't
> see what the benefit of making the field read-only would be (if it's re
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
--- Comment #9 from emufarm...@gmail.com 2011-06-09 00:53:16 UTC ---
(In reply to comment #8)
> (
> > > When logged-in users visit Special:PasswordReset,
> > > they see an _emtpy_ input field for entering a username.
> > If it were pre-filled w
https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
T. Gries changed:
What|Removed |Added
Summary|Implement a way for |Implement a way for
|auth
20 matches
Mail list logo
