dKosopedia admin wrote:
Well, I've been able to decipher the appropriate cookies -- there's a mediawiki prefix AND an ISP prefix as well. Though I can't seem to do much with the <prefixes>_session cookie, I can read <prefixes>UserName and <prefixes>UserId, so as long as those two are always set when one logs in to the wiki then I'm fine. I guess.
And easily spoofable. The right way would be using the mediawiki users infrastructure, which means many files: WebStart.php WebRequest.php User.php ...