https://bugzilla.wikimedia.org/show_bug.cgi?id=33375
Web browser: ---
Bug #: 33375
Summary: Semantic Forms disregard $wgEmailConfirmToEdit
Product: MediaWiki extensions
Version: any
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: Unprioritized
Component: SemanticForms
AssignedTo: yaro...@gmail.com
ReportedBy: da...@hackerspace.lu
CC: wikibugs-l@lists.wikimedia.org
Classification: Unclassified
Even with $wgEmailConfirmToEdit set to true, anonymous users (i.e. not logged
in users) can submit Semantic Forms and thus edit wikipages.
This can be done by either using curl and POSTing to the wiki, by using
javascript or a debugging tool like firebug to enable disabled form fields or
by using the #autoedit: parser function.
The setup is a MW 1.17.1, SMW 1.6.1 and SF 2.2
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
