Christian C. Schouten wrote:
> Dear all,
>
> I'm trying to casify mediawiki as per instructions on
> http://kellinwood.blogspot.com/2009/01/casify-mediawiki-with-phpcas.html
>
> Now, I'm running into a problem that might (or might not?) be what is
> mentioned in the user comment at the end of the page (wpLoginToken against
> CSRF)

Yes, the wpLoginToken will be interfering with the External 
Authentication. Although I have to say, that class smells like a 
vulnerability.


_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to