As submitted in multiple bug reports, Mediawiki has a recent bug that prevents users with old passwords (such that weren't changed in years) from staying logged in. If such users try logging in, they immediately get logged out.
I'm not talking about local installations, but about their webapps like Wikipedia.
Perhaps Mediawiki will end up fixing it, but who knows when. Thankfully, users who originally supplied an e-mail address can use it to reset their password and thus resolve the issue on their own.
My question is - can you think of any way to bypass this issue for users without a provided email address?
I thought to:
- Log in and change password in 1 step.
- Log in and add an e-mail address in 1 step.
But couldn't get either to work as each step requires a different form, so 1 step turns to 2.