| Index: trunk/phase3/includes/specials/SpecialDeletedContributions.php |
| — | — | @@ -26,9 +26,13 @@ |
| 27 | 27 | } |
| 28 | 28 | |
| 29 | 29 | function getQueryInfo() { |
| | 30 | + global $wgUser; |
| 30 | 31 | list( $index, $userCond ) = $this->getUserCond(); |
| 31 | 32 | $conds = array_merge( $userCond, $this->getNamespaceCond() ); |
| 32 | | - |
| | 33 | + // Paranoia: avoid brute force searches (bug 17792) |
| | 34 | + if( !$wgUser->isAllowed( 'hiderevision' ) ) { |
| | 35 | + $conds[] = 'ar_deleted & ' . Revision::DELETED_USER . ' = 0'; |
| | 36 | + } |
| 33 | 37 | return array( |
| 34 | 38 | 'tables' => array( 'archive' ), |
| 35 | 39 | 'fields' => array( |