Fix vulnerability (hopefully): anyone with rollback privileges can mark the rollback...

diff --git a/includes/Article.php b/includes/Article.php
index 473e01d..2c83e5c 100644 (file)
--- a/includes/Article.php
+++ b/includes/Article.php
@@ -2404,7 +2404,7 @@ class Article {
                        $wgRequest->getVal( 'from' ),
                        $wgRequest->getText( 'summary' ),
                        $wgRequest->getVal( 'token' ),
-                       $wgRequest->getBool( 'bot' ),
+                       $wgRequest->getBool( 'bot' ) and $wgUser->isAllowed( 'markbotedit' ),
                        $details
                );