I notice that when the MediaWiki API is disabled (with $wgEnableAPI = false), this also disables auto-suggestions in the search box. Assuming this is intentional... what's the friendliest way to forbid general web access to the API but still allow search suggestions to appear? I considered using the hook 'ApiBeforeMain' to return false unless action=opensearch. Is that the most reliable/friendly solution? This is MediaWiki 1.28.0 with the default search engine, on an Ubuntu 16.04LTS host. Thank you very much, DanB _______________________________________________ Mediawiki-api mailing list Mediawiki-api(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-api

Max Semenik <maxsem.wiki(a)gmail.com> asks: solution? I am creating a wiki (for a specialized project) that lets anonymous users read articles, but that is all they can do. They cannot log in, cannot view article history, cannot view Special Pages, or use any other wiki features. Basically, it's a wiki for a few writers and thousands of anonymous readers. MediaWiki is a great platform because the articles are highly interlinked like an encyclopedia. Unfortunately, when the API is enabled, anybody can still access all the hidden information (article history, etc.). That's why I want to block the API. But then I kill search suggestions. :-) I'm grateful for any advice you may have. Thank you. DanB _______________________________________________ Mediawiki-api mailing list Mediawiki-api(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-api