From cfc5850dfff28dd9b70c6c8b8624941c4a3c390f Mon Sep 17 00:00:00 2001 From: Alex Z Date: Wed, 5 Aug 2009 04:42:54 +0000 Subject: [PATCH] (bug 17864 + bug 19519) - Do input normalization on the username before doing existence/permission checks --- RELEASE-NOTES | 1 + includes/specials/SpecialUserrights.php | 1 + 2 files changed, 2 insertions(+) diff --git a/RELEASE-NOTES b/RELEASE-NOTES index ff6fa7fb92..0dbb7f5389 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -390,6 +390,7 @@ this. Was used when mwEmbed was going to be an extension. and issue with Opera (bug 18497) where fullscreen mode is assumed to be projection mode and the style sheet for screen media is no longer used. * (bug 16084) Default memory limit has be increased to 50M, see $wgMemoryLimit +* (bug 17864/19519) Added proper input normalization in Special:UserRights == API changes in 1.16 == diff --git a/includes/specials/SpecialUserrights.php b/includes/specials/SpecialUserrights.php index 8b77669b08..409b3f19f2 100644 --- a/includes/specials/SpecialUserrights.php +++ b/includes/specials/SpecialUserrights.php @@ -54,6 +54,7 @@ class UserrightsPage extends SpecialPage { } else { $this->mTarget = $wgRequest->getVal( 'user' ); } + $this->mTarget = User::getCanonicalName( $this->mTarget ); /* * If the user is blocked and they only have "partial" access -- 2.20.1