https://bugzilla.wikimedia.org/show_bug.cgi?id=35578

--- Comment #5 from Tim Starling <tstarl...@wikimedia.org> 2012-03-30 06:08:15 
UTC ---
Actually the account was suppressed via ApiBlock, not CentralAuth. I was just
misled by the block summary. ApiBlock calls  SpecialBlock::processForm(), which
since r83810 has not properly validated its parameters. It doesn't notice when
the user does not exist, blindly passing it through to Block::setTarget() and
RevisionDeleteUser::suppressUserName(). 

The ipblocks row had a non-zero ipb_by which is not possible with CentralAuth.
So I cross-referenced the event time with the logs, and sure enough, there was
an api.php post to frwiki at the time in question.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to