From a55e363f50c071631881487416daa49397386252 Mon Sep 17 00:00:00 2001 From: Chad Horohoe Date: Fri, 8 Nov 2013 10:55:57 -0800 Subject: [PATCH] Anons should not be able to use the change e-mail form at all They already bailed out on GET, but we should bail here on POST rather than bait-and-switching. Change-Id: Iaf0474e89d7e660e2025e02bda146aa23ecc592b --- includes/specials/SpecialChangeEmail.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialChangeEmail.php b/includes/specials/SpecialChangeEmail.php index aab839fdfd..d02886f500 100644 --- a/includes/specials/SpecialChangeEmail.php +++ b/includes/specials/SpecialChangeEmail.php @@ -75,7 +75,7 @@ class SpecialChangeEmail extends UnlistedSpecialPage { $user = $this->getUser(); $request = $this->getRequest(); - if ( !$request->wasPosted() && !$user->isLoggedIn() ) { + if ( !$user->isLoggedIn() ) { $this->error( 'changeemail-no-info' ); return; -- 2.20.1