dKosopedia admin wrote:
Well, I've been able to decipher the appropriate
cookies -- there's a
mediawiki prefix AND an ISP prefix as well. Though I can't seem to do
much with the <prefixes>_session cookie, I can read
<prefixes>UserName and <prefixes>UserId, so as long as those two are
always set when one logs in to the wiki then I'm fine. I guess.
And easily spoofable. The right way would be using the mediawiki users
infrastructure, which means many files: WebStart.php WebRequest.php
User.php ...