https://bugzilla.wikimedia.org/show_bug.cgi?id=17422
Summary: Use Sessions instead of cookies for Login
Product: MediaWiki
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: Normal
Component: User login/settings
AssignedTo: [email protected]
ReportedBy: [email protected]
Currently Mediawiki uses cookies when users login. The next version of
mediawiki should use sessions instead of cookies. The advantages are:
More secure. If a person accidentally clicks 'remember me' when they login
using a public computer, and they close the browser thinking it will log them
out, another person uses the public computer and goes to the wiki the previous
user was at and that person will now have full access to someone else's
account.
Sessions work on browsers that have cookies disabled.
So can Mediawiki use sessions for login instead of cookies in the next version
please?
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
