Page MenuHomePhabricator
Create Task
Maniphest T89495

Check for invalid usernames
Closed, DuplicatePublic
Actions

Assigned To
Legoktm
Authored By
Legoktm
Feb 13 2015, 8:52 PM
Tags
Referenced Files
None
Subscribers
Aklapper
gerritbot
Keegan
Krenair
Legoktm
matmarex
Nemo_bis
View All 9 Subscribers

Description

We discovered User:Ff02::3 (https://meta.wikimedia.org/wiki/Special:CentralAuth/Ff02::3) exists today. We should do a check to see if there are any other "IPv6 users" in our database (registered before T39884 was fixed).

Cf. T2323.

Details

SubjectRepoBranchLines +/-
Add checkInvalidUsernames.php scriptmediawiki/coremaster+47 -0
Customize query in gerrit

Related Objects

Event Timeline

Legoktm created this task.Feb 13 2015, 8:52 PM
Legoktm raised the priority of this task from to Needs Triage.
Legoktm updated the task description. (Show Details)
Legoktm added projects: SUL-Finalization, MediaWiki-Core-Team.
Legoktm subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 13 2015, 8:52 PM
Krenair subscribed.Feb 13 2015, 8:53 PM
Keegan subscribed.Feb 13 2015, 8:58 PM
Legoktm renamed this task from Check for IPv6 usernames to Check for invalid usernames.Feb 13 2015, 9:33 PM
Legoktm claimed this task.
Legoktm set Security to None.
Legoktm added a comment.Feb 13 2015, 9:52 PM

Running a script across all wikis to look for invalid usernames...

matmarex subscribed.Feb 13 2015, 9:56 PM
gerritbot added a project: Patch-For-Review.Feb 13 2015, 9:57 PM
gerritbot subscribed.

Change 190565 had a related patch set uploaded (by Legoktm):
Add checkInvalidUsernames.php script

https://gerrit.wikimedia.org/r/190565

Patch-For-Review

Nemo_bis updated the task description. (Show Details)Feb 13 2015, 10:10 PM
Legoktm added a comment.Feb 14 2015, 2:03 AM

Found 218 invalid usernames, some amusing like ~~~~ and other obvious attack accounts that are probably suppressed. Need to figure out what to do with them...

TTO subscribed.Feb 14 2015, 2:18 AM

This looks like the same issue as T5507, which was filed by Ævar (shows how old this issue is).

Nemo_bis subscribed.Feb 14 2015, 6:32 AM

Why check for canonical username instead of User::isValidUserName()?

In T89495#1038580, @TTO wrote:

This looks like the same issue as T5507, which was filed by Ævar (shows how old this issue is).

Indeed. The problem arises every time a new pattern is made invalid or normalised.

Keegan moved this task from It's complicated to Done on the SUL-Finalization board.Feb 17 2015, 11:46 PM
Legoktm closed this task as a duplicate of T5507: Invalid usernames on Wikimedia web sites.Feb 18 2015, 6:08 PM
• bd808 moved this task from Backlog to Done on the MediaWiki-Core-Team board.Feb 20 2015, 11:03 PM
gerritbot added a comment.Feb 21 2015, 12:36 AM

Change 190565 abandoned by Legoktm:
Add checkInvalidUsernames.php script

Reason:
I forgot to abandon this, it's a dupe of checkUsernames.php which is already in core

https://gerrit.wikimedia.org/r/190565

• bd808 moved this task from Done to Archive on the MediaWiki-Core-Team board.Feb 23 2015, 11:58 PM
TerraCodes removed a project: Patch-For-Review.May 8 2016, 9:01 AM
Restricted Application added a subscriber: Steinsplitter. · View Herald TranscriptMay 8 2016, 9:01 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits
  NODES
Note 1
Project 3
USERS 2