dépôts
/
lhc
/
web
/
wiklou.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
SECURITY: Add permission check for suppressed account
[lhc/web/wiklou.git]
/
includes
/
specials
/
SpecialRedirect.php
diff --git
a/includes/specials/SpecialRedirect.php
b/includes/specials/SpecialRedirect.php
index
e827911
..
8006048
100644
(file)
--- a/
includes/specials/SpecialRedirect.php
+++ b/
includes/specials/SpecialRedirect.php
@@
-79,6
+79,11
@@
class SpecialRedirect extends FormSpecialPage {
if ( $user->isAnon() ) {
return null;
}
if ( $user->isAnon() ) {
return null;
}
+ if ( $user->isHidden() && !MediaWikiServices::getInstance()->getPermissionManager()
+ ->userHasRight( $this->getUser(), 'hideuser' )
+ ) {
+ throw new PermissionsError( null, [ 'badaccess-group0' ] );
+ }
$userpage = Title::makeTitle( NS_USER, $username );
return $userpage->getFullURL( '', false, PROTO_CURRENT );
$userpage = Title::makeTitle( NS_USER, $username );
return $userpage->getFullURL( '', false, PROTO_CURRENT );