* XSS issue : now sanitize search query input (fixed in 1.5rc3)
* Remove deprecated $wgOnlySysopsCanPatrol references; use User::isAllowed( 'patrol' )
per bug 5282. Patch by Alan Harder.
+* Prevent registration/login with the username "MediaWiki default"
Special Pages:
* Rearranged Special:Movepage form to reduce confusion between destination
$name = trim( $this->mName );
$u = User::newFromName( $name );
- if ( is_null( $u ) ) {
+ if ( is_null( $u ) || $u->getName() = 'MediaWiki default' ) {
$this->mainLoginForm( wfMsg( 'noname' ) );
return false;
}
return;
}
$u = User::newFromName( $this->mName );
- if( is_null( $u ) ) {
+ if( is_null( $u ) || $u->getName() == 'MediaWiki default' ) {
$this->mainLoginForm( wfMsg( 'noname' ) );
return;
}