Hi all,
Why are locked users can log in via the API? Would have expected that the users get back the status blocked. It says so in any case in the documentation. I have a standard SVN installation without extensions or other modifications. Can anyone confirm this? Below the query and the result comes from unit testing. It looks like get, but in reality it is a post request.
http://unittest.xarax.eu/w/api.php?format=xml&action=login&lgname=un... g02&lgpassword=xxxxx&lgtoken=05b7b7fc4d5d18e389520d5e3ba7f0c2 <?xml version="1.0"?><api xmlns="http://www.mediawiki.org/xml/api/"><login result="Success" lguserid="3" lgusername="Unittesting02" lgtoken="ef8fc0d6e4f463e3b2c8d1716d306f5f" cookieprefix="mw_ut_19a" sessionid="2bce1ed6a491fe957894bab610b77ae4" /></api>
The user is really blocked, like the log says.
12:01, 3. Jun. 2011 Unittesting02 (Diskussion | Beiträge) unbegrenzt (Freigeben | Sperre ändern) Sysadmin (Diskussion | Beiträge | Sperren) Erstellung von Benutzerkonten gesperrt, darf eigene Diskussionsseite nicht bearbeiten (Ungebührliches Verhalten)
I forgot to configure something or is this by design and the documentation is wrong?
Best regards - xarax -