Siebrand has submitted this change and it was merged.

Change subject: (Bug 40962) Refresh SessionID on login
......................................................................


(Bug 40962) Refresh SessionID on login

Prevent session fixations by re-generating a session id value when the
user logs in.

Change-Id: I2ac7cd064e20de167949fbc608a34e6e85ce8464
---
M CentralAuthHooks.php
M CentralAuthUser.php
2 files changed, 7 insertions(+), 5 deletions(-)

Approvals:
  Siebrand: Verified; Looks good to me, approved


--
To view, visit https://gerrit.wikimedia.org/r/36094
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I2ac7cd064e20de167949fbc608a34e6e85ce8464
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/extensions/CentralAuth
Gerrit-Branch: master
Gerrit-Owner: CSteipp <[email protected]>
Gerrit-Reviewer: Siebrand <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to