Hi Brandon, I saw that bug report just now (without this thread as context).
This is not a bug and nothing to worry about whatsoever. For those not up to date with bug 38189 (resolved as invalid), the user is trying to access the following kind of url: http://wiki.example.org/mw/index.php?title=Test&action=markpatrolled That url returns a session error message because of an invalid token. Which is correct because the token (the one not present in the url) does not match the security token associated with the recent change — the recent change of which the id is also not given in the url? To patrol an edit, use the [mark as patrolled] links found in the interface. Although you shouldn't have to deal with the url manually, if you're interested, they should look like this: http://wiki.example.org/mw/index.php?action=markpatrolled&rcid=1234&token=[security_hash] So all this changing of permissions of session data directories has been unnecessary, your MediaWiki install is in a healthy condition. That is, assuming: * Editing a page works fine * That the broken url showing the session token error was indeed created by you manually, and not referred to by the software. -- Krinkle [1] I created a diagram a few months back that may help: http://commons.wikimedia.org/wiki/File:Commons_Mark_as_patrolled.png On Jul 5, 2012, at 9:37 AM, Brandon Pimenta wrote: > I reported it to Bugzilla. See bug > 38189<https://bugzilla.wikimedia.org/show_bug.cgi?id=38189> > . > > I still get the error message. The permissions of the 'sky', > 'wikisessiondata', and 'nonwebaccessible' folders are read and write for > owner and read only for staff and world. Maybe this command will help: > > sudo chmod 777 /Users/sky/nonwebaccessible/wikisessiondata > > Only admins can use the sudo command. > > On Wed, Jul 4, 2012 at 6:32 PM, Platonides <[email protected]> wrote: > >> On 04/07/12 07:44, Brandon Pimenta wrote: >>> Same error: There seems to be a problem with your login session; this >>> action has been canceled as a precaution against session hijacking. Go >> back >>> to the previous page, reload that page and then try again. >>> >>> I think this a bug. I entered the following code in my LocalSettings.php: >>> >>> session_save_path( '/Users/sky/nonwebaccessible/wikisessiondata' ); >>> >>> Really? Why is this happening? What is causing the problem? >> >> What user is the script running as? >> Maybe it's running as a user called apache which can't write into the >> folder of user sky... >> >> >> _______________________________________________ >> MediaWiki-l mailing list >> [email protected] >> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >> > _______________________________________________ > MediaWiki-l mailing list > [email protected] > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
