Flushing cache with CRTL F5. IE9 still shows just login. If it was a cache page I would expect to see username, etc.
Logged in appearance is the ability to edit pages. Anonymous users are denied edit privileges. What concerns me more, if an edit is done, ip address shows as editor in page history.
CTRL F5 in Chrome shows username and logged in. Edit shows username.
It is like you are 1/2 logged in. You are a valid token for a user, but can't determine which so it falls back on ip address instead.
Huge security hole, public computer. If a user logs out it is fine. The token is broken. But if they just close browser, and someone reopened to same wiki, you have edit privileges. Unless it is my host and I have to force a new session somehow.
Tom Sent from my iPhone
On Jan 29, 2012, at 3:45 PM, Platonides Platonides@gmail.com wrote:
On 29/01/12 19:48, Tom wrote:
Was this fixed or written about somewhere.? 16.0 having cookie issues.
IE 9 is holding partial session cookie. If I login in IE 9 then close the browser, then reopen browser mediawiki sees a partial cookie. I appear to be logged in, can edit, yet ip is logged not username. The top right user menu just shows log in. When I move to different pages, ip shows, edit is available, login link still showing.
If the top right menu is asking you to log in (whether it shows your ip or not, that bit doesn't matter), what makes you "appear to be logged in"? Is it that the first page after reopening the browser is showing your username there? That page could have been retrieved from the cache, instead of the new (the problem wouldn't be cookies but cache serving stale pages).
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l