Noticed something today, when someone asked me how to use the API to
login... The docs at
http://en.wikipedia.org/w/api.php (just for
instance, I know it generally run the latest) say:
* action=login (lg) *
This module is used to login and get the authentication tokens.
In the event of a successful log-in, a cookie will be attached
to your session. In the event of a failed log-in, you will not
be able to attempt another log-in through this method for 5 seconds.
This is to prevent password guessing by automated password crackers.
Parameters:
lgname - User Name
lgpassword - Password
lgdomain - Domain (optional)
Example:
api.php?action=login&lgname=user&lgpassword=password
Probably should remove the "example" link and specify that it only works
via HTTP POST now :) As:
<?xml version="1.0" encoding="utf-8"?>
<api>
<error code="mustbeposted" info="The login module requires a POST
request">
Thanks!
SQL