https://bugzilla.wikimedia.org/show_bug.cgi?id=32122

--- Comment #17 from Dan Nessett <[email protected]> 2011-11-10 22:53:58 UTC 
---
(In reply to comment #14)
> The login problem (comments 12 and 13) are expected.
> 
> To avoid someone making you log in with *their* account (bug 23076), we store 
> a
> token in your session that you must provide when logging in. As your session 
> is
> expiring, it doesn't match.
> 
> The error message you are getting is also quite explicit: "this action has 
> been
> canceled as a precaution against session hijacking"

Well, perhaps I should open an enhancement ticket requesting the elimination of
this behavior. When the wiki page initially displays it shows the user as
logged out. When logging in it is a bit startling to receive a warning that the
login has a problem.

By the way, I updated the version to 1.16.5 since this "problem" occurs in that
release. If this is not a bug, then perhaps I should again revert it to 1.16.2,
but I also imagine developers will find toggling the version number constantly
to be annoying. I haven't modified the title, so it suggests the session
problems are old bugs tied to 1.16.2.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to