I try to auto-login mediawiki by API login,but didn't know how to do.Since I
already used login api get "success" status on sandbox, I think maybe I
do something wrong on set cookie.Get token and login api has been revamped in version 1.27
of MediaWiki,I can't find any example code work on 1.28.Thanks for all responses
and suggestion. I've been stuck for so long. I really appreciate some help here.
Thanks.
Here's my code,but didn't get login token properly.
System Info:
Software Version
MediaWiki 1.28.2
PHP 5.6.30
MariaDB 10.1.21
<?php
namespace mediawiki;
// Start session
session_start();
/**
* How to log in mediawiki using PHP cURL?
* -------------------------------------------------
*/
//set login username password which already in your mediawiki database
$username = 'abc';
$password = '123';
//setup url
$Root = 'localhost/mediawiki';
$API_Location = "${Root}/api.php";
//setup cookie
$CookieFilePath = tempnam("/tmp", "TMP0");
$expire = 60*60*24*14 + time();
$CookiePrefix = 'theprefix';
$Domain = 'localhost';
// set variables to use in curl_setopts
$PostFields =
"action=query&meta=tokens&type=login&format=json";
// first http post to sign in to MediaWiki
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "$API_Location");
curl_setopt($ch, CURLOPT_TIMEOUT, 500);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
'Content-Type:
application/x-www-form-urlencoded',
'Content-Length: ' .strlen($PostFields))
);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "$PostFields");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_COOKIEJAR, $CookieFilePath);
curl_setopt($ch, CURLOPT_COOKIEFILE, $CookieFilePath);
$Result = curl_exec($ch);
if(curl_exec($ch) === false) echo '<br>Curl error: ' .
curl_error($ch).'<br>';
curl_close($ch); // curl closed
$ResultSerialized = json_decode($Result,true);
$Token =
$ResultSerialized["query"]["tokens"]["logintoken"];
// cookie must be set using session id from first response
$_SESSION["logintoken"]=$Token;
//How can I get sessionid?
$sessionid=session_id();
$_SESSION["sessionid"] =$sessionid;
setcookie("${CookiePrefix}_Session",$sessionid , $expire,
'/', $Domain);
setcookie("${CookiePrefix}UserName",$username,$expire,'/',$Domain);
setcookie("${CookiePrefix}Token",
$_SESSION["logintoken"], $expire, '/', $Domain);
// second http post to finish sign in
$ch = curl_init();
$PostFields="action=login&lgname=${username}&lgpassword=${password}&lgtoken=${Token}&format=json";
curl_setopt($ch, CURLOPT_URL, "$API_Location");
curl_setopt($ch, CURLOPT_TIMEOUT, 500);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
'Content-Type:
application/x-www-form-urlencoded',
'Content-Length: ' .strlen($PostFields))
);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "$PostFields");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_COOKIE, "${CookiePrefix}_session=$sessionid");
curl_setopt($ch, CURLOPT_COOKIEJAR, $CookieFilePath);
curl_setopt($ch, CURLOPT_COOKIEFILE, $CookieFilePath);
$Result = curl_exec($ch);
if(curl_exec($ch) === false) echo '<br>Curl error: ' .
curl_error($ch).'<br>';
curl_close($ch); // curl closed
$ResultSerialized = json_decode($Result,true);
// set persistent cookies
//$LgToken =
$ResultSerialized["query"]["tokens"]["logintoken"];
$LgUserID = $ResultSerialized["login"]["lguserid"];
$LgUserName =
$ResultSerialized["login"]["lgusername"];
$lgstatus=$ResultSerialized["login"]["result"];
var_dump($lgstatus);
setcookie("${CookiePrefix}UserName", $LgUserName, $expire,
'/', $Domain);
setcookie("${CookiePrefix}UserID", $LgUserID, $expire,
'/', $Domain);
//setcookie("${CookiePrefix}Token", $Token, $expire,
'/', $Domain);
// Delete cURL cookie
unlink($CookieFilePath);
?>
I also try to use clientlogin via postman, post request exactly like example on
mediawiki.org/wiki/API:Login ,but result:
"authmanager-authn-no-primary".
Reference:
stackoverflow.com/questions/14107523/how-do-i-log-into-mediawiki-using-php-…
mediawiki.org/wiki/User:Krinkle/API_PHP_cURL_example
mediawiki.org/wiki/API:Login/de/1_Beispiel
mediawiki.org/wiki/API:Login