Package: python-moinmoin
Version: 1.5.3-1.2etch1
Severity: normal

Hello,

The mail sent to users how go through the "lost password" procedure
has a wrong URL:

> Your wiki account data...
> 
> Login URL: http://wiki.debian.org/UserPreferences

This URL is really misleading, since it's the page to create an account.
The URL should be anything with ?action=login.

The patch attach attached is a partiat backport of upstream's
  http://hg.moinmo.in/moin/1.5/rev/50c7a0cc1791
(The rest of the patch isn't required, because it's fixed by the patch
 020_password_reminder.patch)
>From 701448f691f2677da7ca92b618df1be33cef3cd3 Mon Sep 17 00:00:00 2001
From: Frank Lin PIAT <fp...@klabs.be>
Date: Sat, 10 Jan 2009 17:33:09 +0100
Subject: [PATCH] Fix the forgotten password email login URL.

---
 debian/changelog                               |    7 +++++++
 debian/patches/021_password_reminder_url.patch |   17 +++++++++++++++++
 2 files changed, 24 insertions(+), 0 deletions(-)
 create mode 100644 debian/patches/021_password_reminder_url.patch

diff --git a/debian/changelog b/debian/changelog
index feb9932..aac712d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+moin (1.5.3-2) stable-proposed-updates; urgency=low
+
+  * Non-maintainer upload.
+  * Fix the forgotten password email login URL.
+
+ -- Frank Lin PIAT <fp...@klabs.be>  Sat, 10 Jan 2009 17:11:49 +0100
+
 moin (1.5.3-1.2etch1) stable-security; urgency=high
 
   * Non-maintainer upload.
diff --git a/debian/patches/021_password_reminder_url.patch 
b/debian/patches/021_password_reminder_url.patch
new file mode 100644
index 0000000..e1468d6
--- /dev/null
+++ b/debian/patches/021_password_reminder_url.patch
@@ -0,0 +1,17 @@
+# modified HG changeset patch
+# Orig User Thomas Waldmann <tw AT waldmann-edv DOT de>
+#      Sun May 07 13:17:04 2006 +0200 (2 years ago)
+# changeset 618          50c7a0cc1791
+# parent 617     42958bb7e500
+diff -Nur a/MoinMoin/user.py b/MoinMoin/user.py
+--- a/MoinMoin/user.py 2009-01-10 16:27:32.000000000 +0100
++++ b/MoinMoin/user.py 2009-01-10 16:52:48.000000000 +0100
+@@ -969,7 +969,7 @@
+ 
+ Login Password: %s
+ 
+-Login URL: %s/%s
++Login URL: %s/%s?action=login
+ """, formatted=False) % (
+                         self.name, self.enc_password, 
self._request.getBaseURL(), getSysPage(self._request, 
'UserPreferences').page_name)
+ 
-- 
1.5.6.5

Reply via email to