checkuser, Administrators
2,635
edits
Zhuyifei1999 (talk | contribs) (→Subst vs transcluded templates: reply) |
Zhuyifei1999 (talk | contribs) (→User:Emufarmers: reply) |
||
Line 55: | Line 55: | ||
:I'm just researching why he can be an sysop, how [[User:Emufarmers2]] exist without creating an account, just things like this. --[[YiFei]] | <small>[[User talk:Zhuyifei1999|talk]]</small> 10:53, 5 May 2013 (UTC) | :I'm just researching why he can be an sysop, how [[User:Emufarmers2]] exist without creating an account, just things like this. --[[YiFei]] | <small>[[User talk:Zhuyifei1999|talk]]</small> 10:53, 5 May 2013 (UTC) | ||
::I'm not a programmer (so I don't know the specific detail), but I think I've heard that anyone who has access to a certain MediaWiki file (maybe 'settings.php') on the host server can somehow gain 'backdoor' access to a wiki, and grant themselves sysop and crat rights, without actually having an account on said wiki. I've blocked Emufarmers2 - but I still think we have vulnerabilities with our software setup. [[User:Hoof Hearted|Sean, aka <small>Hoof Hearted</small>]] • <sub>[[:Category:Active administrators of this wiki|Admin]]</sub> • <small>[[User talk:Hoof Hearted|talk2HH]]</small> 05:38, 5 May 2013 (PDT) | ::I'm not a programmer (so I don't know the specific detail), but I think I've heard that anyone who has access to a certain MediaWiki file (maybe 'settings.php') on the host server can somehow gain 'backdoor' access to a wiki, and grant themselves sysop and crat rights, without actually having an account on said wiki. I've blocked Emufarmers2 - but I still think we have vulnerabilities with our software setup. [[User:Hoof Hearted|Sean, aka <small>Hoof Hearted</small>]] • <sub>[[:Category:Active administrators of this wiki|Admin]]</sub> • <small>[[User talk:Hoof Hearted|talk2HH]]</small> 05:38, 5 May 2013 (PDT) | ||
::: It's not possible. See [[LocalSettings.php]] --[[YiFei]] | <small>[[User talk:Zhuyifei1999|talk]]</small> 12:52, 5 May 2013 (UTC) |