Submitted by : simon at: 2003-10-26T21:31:33+00:00 (17 years ago)
Name :
Category : Severity : Status :
Optional subject :  
Optional comment :

> I noticed on my 0.9.4 version that adding a graphic did not qualify for a
> change email. This seems to be a potential vandalism entry point.. ..looks
> like I was right as I didn't find it available to me in the ZWiki
> edit_this_page.


property change --simon, Sat, 27 Sep 2003 20:15:17 -0700 reply
Category: general => mail

... --EmmaLaurijssens, Tue, 07 Nov 2006 22:10:14 -0800 reply
Severity: normal => serious

Yes, it is a vandalism entry point!

patch is in darcs --betabug, Sat, 19 May 2007 07:44:12 -0700 reply
Status: open => closed

Note that edits may send out two mails (when the page content changed and a file was uploaded). I considered changing this, but decided that it's kind of a policy thing: An uploaded file should be treated like a wikipage in the respect that edits trigger mail outs. In that line of thinking, changing a wiki page and uploading a file are 2 edits, therefore 2 mails.