Page MenuHomeMiraheze

Extension for User Name requested
Closed, ResolvedPublic

Description

Wiki URLlilypond.miraheze.org

for some of my templates the username is needed (or at least information if the user is administrator etc.)
there are some extensions that provide this functionaltiy:
*[ https://www.mediawiki.org/wiki/Extension:MyVariables My Variables]
*[ https://www.mediawiki.org/wiki/Extension:UserFunctions UserFunctions]
*[ https://www.mediawiki.org/wiki/Extension:UserMagic UserMagic]

Event Timeline

Manuela created this task.Sun, Aug 4, 16:52

MyVariables and UserMagic need security review

UserFunction will likely be declined by Extension-Review due to a known Security issue

RhinosF1 signed these changes with MFA.Sun, Aug 4, 17:57
RhinosF1 moved this task from Backlog to Pending security review on the Extensions board.
RhinosF1 changed the task status from Open to Stalled.Sun, Aug 4, 17:57
RhinosF1 added a project: Security.

Adding Security due to issues with UserFunction

John removed a project: Security.Sun, Aug 4, 18:32
John added a subscriber: John.

Nothing active on Miraheze, Security is not related

Southparkfan added a subscriber: Southparkfan.EditedWed, Aug 7, 22:07

UserFunctions: caching the IP addresses of users in Varnish is not a good idea, but the parser cache seems to be disabled so security wise this is fine.

MyVariables: also disabling parser cache when needed, approved

UserMagic: seems obsolete due to the other two extensions and does cache user IPs, so declined.

Manuela added a comment.Thu, Aug 8, 03:24

MyVariables is perfect, thank you. When does the change come into effect?

RhinosF1 changed the task status from Stalled to Open.Thu, Aug 8, 06:20

I will take care of installing MyVariables per SPFs approval.

Before installing one question, is this acceptable for privacy reasons? Asking due to it providing "{{CURRENTUSERREALNAME}}" and I'm not 100% sure if real name is public by default.

Before installing one question, is this acceptable for privacy reasons? Asking due to it providing "{{CURRENTUSERREALNAME}}" and I'm not 100% sure if real name is public by default.

It is acceptable, only the user will see their real name. They could also do that by going to their Preferences.

Paladox added a subscriber: Paladox.Thu, Aug 8, 16:30

Won't it be cached @Southparkfan by varnish ?

John added a comment.Thu, Aug 8, 16:44

Won't it be cached @Southparkfan by varnish ?

Not if they are logged in.

Manuela added a comment.Thu, Aug 8, 18:15

Does anyone provide their actual real name in a wiki?

RhinosF1 claimed this task.Fri, Aug 16, 15:57

Per discussion

Currently added, will test soon for everyone.

RhinosF1 closed this task as Resolved.Fri, Aug 16, 18:17

MyVariables is DONE and can be enabled in ManageWiki for all wikis.

Per @Southparkfan, the other two extensions are declined.

And congrats to me for adding my first extension!

Manuela added a comment.Tue, Aug 20, 08:18

Thank you so much, already activated in my wiki!