Page MenuHomeMiraheze
Create Task
Maniphest T10033

WikiForum broken on All The Tropes
Closed, InvalidPublic
Actions

Description

The WikiForum extension used by All The Tropes seems to have been disrupted in some manner -- the Special:WikiForum page displays "No such special page - You have requested an invalid special page." instead of linking to the forum directory. As far as we can tell, the extension is still live and supported, there are no issues resembling it reported for it, and it appears all the admin management options are still working. As far as we can tell, that means there must be a backend issue somewhere, possibly caused by the recent update.

Could someone please look into this? Thank you.

Event Timeline

Looney_Toons created this task.Dec 1 2022, 14:09
Herald added subscribers: Agent_Isai, Universal_Omega. · View Herald TranscriptDec 1 2022, 14:09
Universal_Omega added a comment.Dec 1 2022, 20:27

I have meant to make this widely known (through ManageWiki note) for a while, so I am very sorry it was not. WikiForum has been disabled due to security vulnerabilities.

Arcane21 added a comment.Dec 1 2022, 22:15

I see. Given we were using it actively, it would be desirable to have it restored as soon as this is passed. We do have some fallback forums for use in the meantime, but restoration of that is preferred whenever possible.

Reception123 triaged this task as Normal priority.Dec 3 2022, 06:25
Reception123 added projects: MediaWiki, MediaWiki (SRE).
Herald added a subscriber: Reception123. · View Herald TranscriptDec 3 2022, 06:25
Universal_Omega closed this task as Invalid.Dec 3 2022, 23:14
Universal_Omega claimed this task.
In T10033#202343, @Arcane21 wrote:

I see. Given we were using it actively, it would be desirable to have it restored as soon as this is passed. We do have some fallback forums for use in the meantime, but restoration of that is preferred whenever possible.

I understand, unfortunately our priority in the matter is security, and since a patch at this time is unknown, we can not re-enable, nor have any ETA for it.

Due to this depending on upstream, closing as invalid, but we will work to restore it as soon as possible.

Herald added a project: Universal Omega. · View Herald TranscriptDec 3 2022, 23:14
Paladox added a subscriber: Paladox.Dec 4 2022, 19:06
In T10033#202696, @Universal_Omega wrote:
In T10033#202343, @Arcane21 wrote:

I see. Given we were using it actively, it would be desirable to have it restored as soon as this is passed. We do have some fallback forums for use in the meantime, but restoration of that is preferred whenever possible.

I understand, unfortunately our priority in the matter is security, and since a patch at this time is unknown, we can not re-enable, nor have any ETA for it.

Due to this depending on upstream, closing as invalid, but we will work to restore it as soon as possible.

Can a task be filed upstream with the identified security issues?

Universal_Omega added a comment.Dec 4 2022, 20:19
In T10033#202847, @Paladox wrote:
In T10033#202696, @Universal_Omega wrote:
In T10033#202343, @Arcane21 wrote:

I see. Given we were using it actively, it would be desirable to have it restored as soon as this is passed. We do have some fallback forums for use in the meantime, but restoration of that is preferred whenever possible.

I understand, unfortunately our priority in the matter is security, and since a patch at this time is unknown, we can not re-enable, nor have any ETA for it.

Due to this depending on upstream, closing as invalid, but we will work to restore it as soon as possible.

Can a task be filed upstream with the identified security issues?

There is one,

Arcane21 added a comment.Dec 5 2022, 16:26

We at ATT understand the problems mentioned and can wait, this is not a super high priority at present.

For later reference, however, could the filed issue with upstream be linked here?

Paladox added a comment.Jan 15 2023, 17:47
In T10033#202895, @Universal_Omega wrote:
In T10033#202847, @Paladox wrote:
In T10033#202696, @Universal_Omega wrote:
In T10033#202343, @Arcane21 wrote:

I see. Given we were using it actively, it would be desirable to have it restored as soon as this is passed. We do have some fallback forums for use in the meantime, but restoration of that is preferred whenever possible.

I understand, unfortunately our priority in the matter is security, and since a patch at this time is unknown, we can not re-enable, nor have any ETA for it.

Due to this depending on upstream, closing as invalid, but we will work to restore it as soon as possible.

Can a task be filed upstream with the identified security issues?

There is one,

do you have the link?

Universal_Omega added a comment.Jan 15 2023, 17:51

https://phabricator.wikimedia.org/T312733

Paladox added a comment.Jan 15 2023, 17:53
In T10033#207374, @Universal_Omega wrote:

https://phabricator.wikimedia.org/T312733

Thanks! Can I be added to it please?