Some people are not aware of this, and they use templates to style Mediawiki messages. If
the administrator forgets to protect the template, it opens up a backdoor for other users
to edit the message.
Techman224
On 2013-04-20, at 4:25 AM, Petr Kadlec <petr.kadlec(a)gmail.com> wrote:
On 20 April 2013 07:08, Techman224
<techman224(a)techman224.ca> wrote:
Right now the MediaWiki namespace is protected
from editing. However, if
you add a template to a Mediawiki message and the template is unprotected,
any user could edit the message by editing the template, creating a
backdoor.
Ummm... Don't do that, then? Sometimes you _want_ to include pieces of text
editable by more than just sysops (say, by autoconfirmed users), so you use
a template from a MediaWiki message. (Cf. e.g.
https://cs.wikipedia.org/wiki/MediaWiki:Recentchangestext and
https://cs.wikipedia.org/wiki/%C5%A0ablona:Ozn%C3%A1men%C3%ADRC.) Or, you
do not want to do that, then why are you using an unprotected template?
Either transclude another page in MediaWiki namespace as a template
({{MediaWiki:Something}}), or make sure you protect the used template (with
possible cascade).
-- [[cs:User:Mormegil | Petr Kadlec]]
_______________________________________________
Wikitech-l mailing list
Wikitech-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l