Project for issues affecting the CreateWiki extension.
Sun, Oct 13
Tue, Oct 1
Gosh, this may take a while. Picking identity is difficult and complicated to me.
Tue, Sep 24
Sat, Sep 21
The emails linked to both accounts matched.
Fri, Sep 20
Wed, Sep 18
@Noblets563 Did you send an email to me?
Sep 15 2019
Sep 14 2019
@Noblets563 any way you can confirm your identity?
Sep 12 2019
Aug 30 2019
Aug 28 2019
Aug 27 2019
Not a security issue. Behaviour has been fixed in 1.34 I believe now.
Aug 16 2019
Don't touch my tag - please and thank you.
Adding CreateWiki as it's a feature request
Aug 9 2019
paladox> !log usermod -a -G ssl-cert mysql - db5
So we have two extremely similar issues, have we considered the link is infra or upstream and not two entirely separate extensions?
Aug 8 2019
Aug 7 2019
Actually, looks like the other person involved was on enwp 1 day ago so I might be able to drop them an email.
Just an update: The IRC log with the fix on no longer exists (me and Bawolff don't have it and the other person involved hasn't been seen in a long while).
Moving to low priority as most other CW feature requests
I will agree with John that this is not a security issue, since only the viewers IP is shown, but also agree that to be safe we should keep it like this for the time being.
Aug 5 2019
I found https://phabricator.wikimedia.org/T219429 which was what Bawolff thought the issue was back then with another wiki.
If I Remember rightly it's either a script or some SQL that repaired the issue on this wiki
I think there might be a task for it upstream - I’m going to search my records for the information later
Also I don’t believe it’s realistically a security issue (that’s my opinion)
It’s borderline but we don’t know the full impact so Paladox said do so as a precaution but I’ll give you my definite opinion once I have time to review my records.
MediaWiki has atrocious handling of non existent accounts - makes a lot of sense but I feel like this should be an upstream issue to be addressed.
I had an issue on another wiki where accounts that had been removed from the DB showed the viewers IP and a fix was given by Brian Wolff from Wikimedia Security - I’ll see if I can dig the information up later today if no one can grab him before then
Aug 4 2019
Fixed in https://github.com/miraheze/CreateWiki/pull/118 thanks!