HttpsLogin

Aus Free Software
Zur Navigation springen Zur Suche springen

Deprecated Extension!

This extension is deprecated and no longer maintained by the developer. It may no longer work for current versions of MediaWiki and Bugs are no longer fixed. Please see the Deprecated section for more information.


Manual on MediaWiki Extensions
List of MediaWiki Extensions
Crystal Clear action run.png
httpLogin

Release status: stable

Implementation other (invalid type)
Description Allows you to use https only for pages that transmit your password
Author(s) Mati talk
Version 1.0 (2008-02-10)
MediaWiki 1.11.x
License GPL v3 or any later version.
Download see Download
Documentation
Changelog
Parameters none
Example Try to login into this wiki.


Passwords should never be transmitted through a plain HTTP connection since an eavesdropper might be able to get your password. Using HTTPS is a solution but adds an additional load to your servers (for the encryption) so you don't want to use https if you are on "normal" pages. This extension does just that: It redirects the user to use HTTPS when using the login page, and redirects him/her to HTTP when viewing pages that won't transmit your password.



Deprecated

With the introduction of the BeforeInitialize Hook this extension is now superseded by the SecurePages extension, which provides more functionality.

Download

The source code of this extension was hosted on git.fsinf.at, a project no longer maintained. Since this extension was so old, the git repository was not transfered to any other repository and the source code is no longer available.

Installation & Configuration

Before you go forward with installing this extension, you should make sure that your wiki is working fine with both HTTP and HTTPS. Otherwise, results may be unpredictable.

Other than that, the installation is straight forward:

  • Download the sourcecode into your extensions/ directory
  • simply include the File in LocalSettings.php:
require_once ( "$IP/extensions/httpsLogin/httpsLogin.php" );

Changelog

1.0

first version documented here.

ToDo

  • Some pages other than Special:Userlogin transmit the password, they should be switched to https to. If anyone wants to contribute, contact me.
  • do better & automatic translations

License

GPL v3 or any later version.

A lot of the sourcecode of this extension originally comes from here.