Last modified: 2008-08-24 02:35:41 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T12958, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 10958 - Add $wgCookiePrefix property
Add $wgCookiePrefix property
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: Normal enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2007-08-16 07:48 UTC by Stéphane Brunner
Modified: 2008-08-24 02:35 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
To fix it (698 bytes, patch)
2007-08-16 07:48 UTC, Stéphane Brunner
Details

Description Stéphane Brunner 2007-08-16 07:48:17 UTC
Created attachment 4001 [details]
To fix it

I use a modified version of the farmer extension (http://www.mediawiki.org/wiki/Extension:Farmer).

The problem I have it is that I cant login to all wiki by one time because the cookie prefix is different for each wiki :(

The solution I made is the define in LocalSettings.php a value for $wgCookiePrefix but it isn't enough.

I should as modify the include/Setup.php to don't sets $wgCookiePrefix if it's already define.

CU And thanks in advance,
Stéphane Brunner
Comment 1 Rob Church 2007-08-28 17:25:12 UTC
Might be an idea to set $wgCookiePrefix = false; in includes/DefaultSettings.php, to avoid a register_globals injection vector.
Comment 2 Stéphane Brunner 2007-08-29 15:01:58 UTC
I don't exactly know what it's  "register_globals injection vector", 
then I'm OK with your proposition.
Comment 3 Chad H. 2008-08-24 02:35:41 UTC
Has been this way since r37893. Apparently I A) Didn't know about this bug, and B) Claimed I was fixing a completely unrelated bug (which oddly enough, I wasn't even fixing). Figures. In any case, FIXED.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links