robchurch@svn.leuksman.com wrote:
Revision: 13955
[snip]
$wgUser = $u;$wgUser->setCookies();
[snip]
# Call hooks
Calling the hook here, now before $wgUser is set, caused a privacy leak for a few minutes. IP addresses of people registering new accounts were broadcast on Recent Changes and the IRC feeds until the change was reverted.
I've removed the offending entries from the recentchanges tables.
-- brion vibber (brion @ pobox.com)