Description

You can attach a file to a page that does not exists.

Steps to reproduce:

1. Go to this Page: ThisPageDoesNotExistsYet

2. Click on AttachFile

3. Send a file
4. Close the message

The page does not exsits, you see as a deleted page in RecentChanges although it was never created, but the file in on the wiki.

Example

• Here is a file I attached in this wiki: http://moinmoin.wikiwikiweb.de/ThisPageDoesNotExistsYet?action=AttachFile&do=view&target=Picture1.pdf

• Here is a page with hidden name from bug MoinMoinBugs/CanCreateBadNames with an attachment. The wiki administrator must delete such file from the shell - because you can't see the link to the page in any other page.

  • The administrator can get the hidden page name by looking at the source of RecentChanges

Details

Discussion

What should be done

Create a page creation form for creating pages.

In this page you can:

• Select page template
• Go to pages with similar name
• Search
• Go back in your page trail
• Go to one of the page in the navibar
• Read very basic help on page creation - what are templates, how to search for similar pages etc.

In this page you can't - because there are no links:

• Spell check
• Attach Files
• Rename
• Delete
• See local site map
• Go to page info
• See raw source
• See print version
• Edit text
• Refresh cache

And any other action you can't do with something that does not exists yet.

Benefits:

• Less user errors
• Less cleanup work for the admin
• The wiki can't be use for hidden files warez?
• We can remove the stupid error message: "This page was deleted or never created", because you can click on the links that cause this error.
• It just makes sense

This might be a way to abuse the wiki, as described above, so it should be fixed. -- OliverGraf 2004-08-02 16:19:34

• How to abuse the wiki? Yeah, the file isnt seen by most people. But adding a file to a seldom visited page leads to the same effect. -- AlexanderSchremmer 2004-10-14 21:12:02

  • The upload will be even shown on RC. -- AlexanderSchremmer 2004-10-19 20:33:17

  • Uploading things to OrphanedPages would have really the same effect. -- AlexanderSchremmer 2004-10-19 20:34:34

Plan

• Priority: medium
• Assigned to:
• Status: fixed in patch-212 by returning empty available actions dict for non existing pages. No action appear in the user interface and request will not use action which no available.

CategoryMoinMoinBugFixed