From 14b42a37d3849c584e9988164d6bc96430dff4b1 Mon Sep 17 00:00:00 2001 From: Nick Jenkins Date: Wed, 25 Oct 2006 08:31:44 +0000 Subject: [PATCH] Bug 7369 - Allow "Show Changes" without requiring edit token; Patch by Werdna. --- RELEASE-NOTES | 1 + includes/EditPage.php | 3 +++ 2 files changed, 4 insertions(+) diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 5beb3a5519..b1ec47e4e4 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -85,6 +85,7 @@ it from source control: http://www.mediawiki.org/wiki/Download_from_SVN * (bug 7663) Include language variant switcher links on Nostalgia skin * (bug 6531) Fix PHP fatal error on installation page with bad username input. * (bug 6977) Remove 404 link for autogenerated database documentation. +* (bug 7369) Allow "Show Changes" without requiring edit token. == Languages updated == diff --git a/includes/EditPage.php b/includes/EditPage.php index ce224e5269..1dad05ef1c 100644 --- a/includes/EditPage.php +++ b/includes/EditPage.php @@ -439,6 +439,9 @@ class EditPage { # The unmarked state will be assumed to be a save, # if the form seems otherwise complete. wfDebug( "$fname: Passed token check.\n" ); + } else if ( $this->diff ) { + # Failed token check, but only requested "Show Changes". + wfDebug( "$fname: Failed token check; Show Changes requested.\n" ); } else { # Page might be a hack attempt posted from # an external site. Preview instead of saving. -- 2.20.1