Extension talk:ConfirmAccount/2021

• Archive 1
• Archive 2
• Archive 3

email confirmation not preserved

a user who has confirmed his or her e-mail for account creation has to again confirm the e-mail for mediawiki once the account was created. Requiring e-mail confirmation twice is really bad. [[kgh]] (talk) 23:05, 7 January 2021 (UTC)

Why is the confirmaccount-email-body not used on account approval

I posted the question on the Support Desk

Project:Support desk/Flow/2021/01#h-Why_is_the_confirmaccount-email-body_not_used_when_account_is_approved-2021-01-08T15:28:00.000Z

but maybe it should be posted here

I was trying to figure out why the lang.json files are not being used to send out the approval email in the language the request was submitted in by the user when I noticed the email message was very different than the "confirmaccount-email-body": in line 82 of the wiki/extensions/ConfirmAccount/i18n/requestaccount/en.json Ken Roy (talk) 20:47, 8 January 2021 (UTC)

Looks like the account created email message is coming from the wiki/languages/i18n/en.json file

"createaccount-text": "The account you requested for this email address on MediaWiki ($4) named \"$2\", with a temporary password \"$3\" has been created.\nYou should log in and change your password now.\n\nYou may ignore this message, if this account was created in error.",

and is being issued by the wiki/includes/auth/TemporaryPasswordPrimaryAuthenticationProvider.php

in the function sendNewAccountEmail

It also appears that the following instruction

       $userLanguage = $user->getOption( 'language' );

does not get the language used by the user when Registering for a Username

Why is the ConfirmAccount not issuing the email? Ken Roy (talk) 14:37, 11 January 2021 (UTC)

I upgraded to MediaWiki 1.35.1 over the weekend and I cannot find where the Account created email is coming from.

It now starts with

Someone created an account for your email address on TNG Wiki ...

Can someone please identify where that message is within MediaWiki 1.35.1

Installed software

Product     Version

MediaWiki     1.35.1

PHP     7.4.9 (cgi-fcgi)

MySQL     5.7.31-percona-sure1-log

ICU     63.1

Lua     5.1.5

$wgDefaultSkin = "vector";

Extensions

wfLoadExtension( 'CategoryTree' );

wfLoadExtension( 'Cite' );

wfLoadExtension( 'CiteThisPage' );

wfLoadExtension( 'CodeEditor' );

wfLoadExtension( 'CollapsibleVector' );

wfLoadExtension( 'ConfirmAccount' );

wfLoadExtension( 'ConfirmEdit' );

wfLoadExtension( 'EditUser' );

wfLoadExtension( 'Gadgets' );

require_once "$IP/extensions/GoogleTranslator/GoogleTranslator.php";

wfLoadExtension( 'ImageMap' );

wfLoadExtension( 'InputBox' );

require_once "$IP/extensions/LanguageSelector/LanguageSelector.php";

wfLoadExtension( 'LocalisationUpdate' );

wfLoadExtension( 'Lockdown' );

require_once "$IP/extensions/MobileDetect/MobileDetect.php";

wfLoadExtension( 'MobileFrontend' );

wfLoadExtension( 'MyVariables' );

wfLoadExtension( 'NewUserMessage' );

wfLoadExtension( 'ParserFunctions' );

wfLoadExtension( 'Poem' );

require_once "$IP/extensions/Polyglot/Polyglot.php";

wfLoadExtension( 'Renameuser' );

wfLoadExtension( 'ReplaceText' );

wfLoadExtension( 'Scribunto' );

wfLoadExtension( 'SecureLinkFixer' );

wfLoadExtension( 'SyntaxHighlight_GeSHi' );

wfLoadExtension( 'TemplateData' );

wfLoadExtension( 'TextExtracts' );

wfLoadExtension( 'TitleKey' );

wfLoadExtension( 'UserMerge' );

wfLoadExtension( 'VisualEditor' );

wfLoadExtension( 'WikiEditor' );

working on getting the ConfirmAccount Request Account form in different languages on the same wiki using LanguageSelector. Have most of it working, but cannot find where the account created message is defined. It is not in the ConfirmAccount en.json files

Thanks in advance for any help you all can provide Ken Roy (talk) 23:36, 20 January 2021 (UTC)

Mea culpa,

It is heck getting old and upgrading MediaWiki software only every 3 years or so. I completely forgot that I had changed that message when I upgraded to MW 1.27.3

It would be nice though if the account approved email came from the ConfirmAccount extension confirmaccount-email-body message instead the generic createaccount-text in the wiki/languages/i18n json files

Sorry raising this issue Ken Roy (talk) 14:04, 21 January 2021 (UTC)

I have the same issue, and I have to change createaccount-text for the moment to work it out. Marx.FelipeForte (talk) 03:43, 27 January 2021 (UTC)

How do I a make the Real Name a required field

How do I make the Real Name a required field in the MW 1.35 LocalSettings.php. I have the following

defined in LocalSettings.php after the extension is loaded

## option to create User: page set to true

$wgMakeUserPageFromBio = true;

## option to create User talk: page set to true

$wgAutoWelcomeNewUsers = true;

$wgConfirmAccountRequestFormItems = [
    'UserName'        => [ 'enabled' => true ],
    'RealName'        => [ 'enabled' => true ],
    'Biography'       => [ 'enabled' => true, 'minWords' => 1 ],
    'AreasOfInterest' => [ 'enabled' => false ],
    'CV'              => [ 'enabled' => false ],
    'Notes'           => [ 'enabled' => false ],
    'Links'           => [ 'enabled' => false ],
    'TermsOfService'  => [ 'enabled' => true ],
];

In testing I am able to submit a request account with an empty field for the real name, which we use in the User: profile

Extension:ConfirmAccount page indicates

The default values are in ConfirmAccount.config.php, but you should not edit that file.

but I am not able to find that file. Ken Roy (talk) 15:52, 21 January 2021 (UTC)

IPv6 // Error 1406: Data too long for column 'acr_storage_key' at row 1 in tables "account_requests" and "account_credentials"

There seems to be an issue in some environments for MW 1.35.x, probably also for other versions. Tracked with T275522. [[kgh]] (talk) 17:33, 23 February 2021 (UTC)

Turns out that the extension is not yet up for requests from users with IPv6. :| [[kgh]] (talk) 20:49, 23 February 2021 (UTC)

An immediate but not final solution is offered at T275522 [[kgh]] (talk) 10:06, 24 February 2021 (UTC)

Captcha result is ignored when submiting account creation request

It seems like there's some issues with ConfirmAccount working with ConfirmEdit. Namely, the captcha value doesn't need to be valid in order to be submitted! Extension talk:ConfirmEdit/2020#h-QuestyCaptcha_not_preventing_account_creation-2020-04-21T22:44:00.000Z seems to report the same issue. I can confirm this is not only affecting QuestyCaptcha but also other types such as hCaptcha, and affects versions between MediaWiki 1.31 and 1.35.

Apparently this has been an issue for nearly 4 years. https://phabricator.wikimedia.org/T168783 Jeffrey Wang 17:51, 25 February 2021 (UTC)

Borrowing Kghbln's terminology in another thread, an immediate but not final solution is offered here for hCaptcha only. (It is not very pretty and needs a lot of revising to commit to the codebase, but it works as a patch.) Make patches to the following files by replacing their contents with the contents in the link:

MediaWiki 1.35+:

• includes/frontend/specialpages/actions/RequestAccount_body.php: https://github.com/mywikis/ConfirmAccount/blob/2f4eca54480992f78a5883d3be9dc04deba6d047/includes/frontend/specialpages/actions/RequestAccount_body.php
• includes/business/AccountRequestSubmission.php: https://github.com/mywikis/ConfirmAccount/blob/2f4eca54480992f78a5883d3be9dc04deba6d047/includes/business/AccountRequestSubmission.php

MediaWiki 1.31:

• frontend/specialpages/actions/RequestAccount_body.php: https://github.com/mywikis/ConfirmAccount/blob/fe985841feb6501de5dcfc2bf2dc723cd4ef5ab9/frontend/specialpages/actions/RequestAccount_body.php
• business/AccountRequestSubmission.php: https://github.com/mywikis/ConfirmAccount/blob/fe985841feb6501de5dcfc2bf2dc723cd4ef5ab9/business/AccountRequestSubmission.php

FAQs:

1. You might ask, how would I get hCaptcha working on MediaWiki 1.31 when it is only for MediaWiki 1.35+?

Simple, just make sure you change line 139 protected function addCaptchaAPI( (as seen at https://github.com/wikimedia/mediawiki-extensions-ConfirmEdit/blob/master/hCaptcha/includes/HCaptcha.php#L139) to public function addCaptchaAPI(. That's it! Follow instructions for installing hCaptcha as normal otherwise and ignore the fact that it is only made for 1.35+. Another issue might appear that will cause pages such as Special:CreateAccount to error with the call to the addCSPSources() method on line 41 of HTMLHCaptchaField.php, but it can be fixed by removing that function call, since MediaWiki 1.31 doesn't offer support for this (as seen at https://github.com/wikimedia/mediawiki-extensions-ConfirmEdit/blob/master/hCaptcha/includes/HTMLHCaptchaField.php#L41).

2. Why does this patch only work for hCaptcha?

The way that ConfirmEdit and ConfirmAccount work together currently to "handle" captchas (or more precisely, don't handle captchas) is not easily fixable. This interim solution simply enables the form to accept the necessary captcha fields and adds a cURL request to the hCaptcha endpoint and evaluates its response. This was pretty easy to implement without referring to too many ConfirmEdit configuration variables and functions. We only made this patch for hCaptcha because MyWikis has moved to using hCaptcha on all wikis instead of QuestyCaptcha or reCAPTCHA. Our reasons for this choice are listed on our blog, and in our experience, reCAPTCHA is useless and has long been cracked by spambots. If you have a compelling reason for us to develop a temporary patch for QuestyCaptcha, leave a message below.

3. Are there any known issues with this patch?

I should note there is a small bug where hCaptcha doesn't populate the token passed along in the form submission if you previously submitted the form and ConfirmAccount gave you an error. But the patch makes up for it by adding an error message that encourages the user to leave and come back to the page to try again. Plus, nobody would be submitting the page without a captcha done in the first place except by mistake. Jeffrey Wang 03:55, 26 February 2021 (UTC)

MW 1.36.1 Internal Error

Hello, I'm getting the following when using the plugin. Any suggestions for addressing it would be appreciated.

---

[bddb5397a66d499e1af05db6] /wiki/Special:RequestAccount Error: Call to a member function timeanddate() on null

Backtrace:

from /home/litwnaqg/public_html/extensions/ConfirmAccount/includes/backend/ConfirmAccount.class.php(121)

#0 /home/litwnaqg/public_html/extensions/ConfirmAccount/includes/business/AccountRequestSubmission.php(256): ConfirmAccount::sendConfirmationMail(User, string, string, string)

#1 /home/litwnaqg/public_html/extensions/ConfirmAccount/includes/frontend/specialpages/actions/RequestAccount_body.php(343): AccountRequestSubmission->submit(RequestContext)

#2 /home/litwnaqg/public_html/extensions/ConfirmAccount/includes/frontend/specialpages/actions/RequestAccount_body.php(83): RequestAccountPage->doSubmit()

#3 /home/litwnaqg/public_html/includes/specialpage/SpecialPage.php(646): RequestAccountPage->execute(NULL)

#4 /home/litwnaqg/public_html/includes/specialpage/SpecialPageFactory.php(1386): SpecialPage->run(NULL)

#5 /home/litwnaqg/public_html/includes/MediaWiki.php(309): MediaWiki\SpecialPage\SpecialPageFactory->executePath(Title, RequestContext)

#6 /home/litwnaqg/public_html/includes/MediaWiki.php(913): MediaWiki->performRequest()

#7 /home/litwnaqg/public_html/includes/MediaWiki.php(546): MediaWiki->main()

#8 /home/litwnaqg/public_html/index.php(53): MediaWiki->run()

#9 /home/litwnaqg/public_html/index.php(46): wfIndexMain()

#10 {main} Grlucas (talk) 19:28, 31 July 2021 (UTC)

Apparently, you are missing a line of text from the error log. Maybe you're missing a dependency?

If you could, it would be interesting if you would give out more information since I am wondering whether you installed the extension fresh out of the box or it suddenly stopped working after you updated MediaWiki. MarioSuperstar77 (talk) 21:27, 31 July 2021 (UTC)

@MarioSuperstar77 I installed a fresh version on an upgraded wiki. I installed per the instructions and all goes well until I actually try to use it, producing the backtrace above. I just rechecked. Grlucas (talk) 12:30, 1 August 2021 (UTC)

Hello, I am getting the same errors and new users cannot request accounts. I do not have ConfirmEdit running yet. I have tried the work arounds on the extension page (actually completely broke my page). I then removed the extension and reinstalled with the latest version of the extension and still have the same issue.

Did something break with the update to Mediawiki 1.36.1? Scottsmithnorwich (talk) 16:17, 5 August 2021 (UTC)

@Scottsmithnorwich Sorry for your trouble, but glad to see I'm not the only one.

Anyone have any idea about this? Grlucas (talk) 19:22, 5 August 2021 (UTC)

Update interaction diagram

The "Interaction diagram of a successful account creation process." illustration in Extension:ConfirmAccount#Usage does not include any New User "talk page" creation. It is the most persistent place to that the Admin/bureaucrat has to give newbie instruction to the new account holder about how to begin editing.

Our site's welcome message is a "Welcome to Gramps! We hope you will contribute much and well. You will probably want to read the help pages. Again, welcome and have fun! <approving admin name> (talk) <datestamp>"

Pretty useless. We've created a "Welcome survey" transclusion template but have to manually add it after each new user creation. (See https://www.gramps-project.org/wiki/index.php/User_talk:JohnRSibert)

But it has been SO long since the site was set up that we cannot find where to customize this message. The Manual:User creation page does not any obvious place detailing the New Account creation process... it says what triggers the User creation but does not have a flowchart of the overt steps performed by the wiki nor how to find documentation on controlling those steps.

I'd really appreciate a section on this Extension:ConfirmAccount page that lists the template pages (or documentation pages) used to generate content communicating with a new account applicant.

It should be easier to find all the interaction generators/templates if admins/bureaucrats want to customize the verbiage on:

• the new account web request form
• the eMail sent to the admin (so they can add links to New User Approval policy or blacklisted user lists)
• the confirmation eMail sent to a New User
• the Welcome message created on the New User's Talk page
• the temporary password eMail
• the log-on and change password page

I also do not know if these are the same communications that the user normally sees from the MediaWiki during "direct account creation". Googling for that "direct account creation" term only finds the ConfirmAccount extension documentation. Is there a searchable term for this process?

Thanks,

Brian BAMaustin (talk) 14:29, 2 September 2021 (UTC)

Email address confirmation doesn't update 'user_email_authenticated'

I'm using ConfirmAccount and ConfirmEdit extensions. Right now, when a user requests an account, they get an email asking them to confirm their email address. After clicking it on, the admin will get a notification of a new account request. After admin creates thew new account, the password is sent to the user. However, there account is still marked as not having email confirmed. In the database, the user entry for that user in the user table shows the field 'user_email_authenticated' as null while this should have a timestamp.

If the user goes through their preferences, it still says "Your email address is not yet confirmed. No email will be sent for any of the following features." If they click on that, they get yet another email asking them to confirm their email address. Eventually, this then confirms their email address and updates the database.

Why is there a need for double email confirmation? Versions: MediaWiki: 1.36.2 Confirm User Accounts: – (3195e5a) 11:46, October 7, 2021 Confirm Edit: 1.6.0 TazzyTazzy (talk) 23:16, 28 October 2021 (UTC)

I've implemented this quick fix in my localsettings.php.

# Automatically set the user's email as validated since they have to get validated through ConfirmAccount.
# Must have "$wgGroupPermissions['*']['createaccount'] = false;" per ConfirmAccount extension.
$wgHooks['LocalUserCreated'][] = 'onLocalUserCreatedEmailAutoConfirm';
function onLocalUserCreatedEmailAutoConfirm( $user, $autocreated ) {
   $user->confirmEmail();
   $user->SaveSettings();
}

This should work since anon users can't create accounts, only admins. This also fixed the issue of the user being redirected to create an account after changing their temporary password. TazzyTazzy (talk) 08:27, 1 November 2021 (UTC)

Automatically set the user's email as validated since they have to get validated through ConfirmAccount.

1. Must have "$wgGroupPermissions['*']['createaccount'] = false;" per ConfirmAccount extension.

$wgHooks['LocalUserCreated'][] = 'onLocalUserCreatedEmailAutoConfirm';

function onLocalUserCreatedEmailAutoConfirm( $user, $autocreated ) {

$user->confirmEmail();

$user->SaveSettings();

} 45.189.44.74 (talk) 17:43, 6 January 2023 (UTC)

Thank you for such a simple fix -- this has been annoying me for years!

Hopefully it'll get wrapped into the extension itself. Lorenmaxwell (talk) 18:38, 16 November 2023 (UTC)