Extension:HttpsLogin
From MediaWiki.org
 Release status: stable |
|||
|---|---|---|---|
| Implementation | User interface | ||
| Description | Allows you to use https only for pages that transmit your password | ||
| Author(s) | MatiTalk | ||
| Last Version | 1.0 (2008-02-10) | ||
| MediaWiki | 1.8 | ||
| License | GPLv2 | ||
| Download | SourceCode in SVN Documentation Changelog |
||
| Example | Try to login into this wiki. | ||
|
|||
|
check usage (experimental) |
|||
Passwords should never be transmitted through a plain HTTP connection since an eavesdropper might be able to get your password. Using HTTPS is a solution but adds an additional load to your servers (for the encryption) so you don't want to use https if you are on "normal" pages. This extension does just that: It redirects the user to use HTTPS when using the login page, and redirects him/her to HTTP when viewing pages that won't transmit your password.
Note: If you use MediaWiki 1.16 or newer or don't mind patching a single line into your MediaWiki, you might want to consider the SecurePages-extension instead.
Contents |
[edit] Download
Since this extension has been more or less deprecated for the SecurePages-Extension, the only download is in the tags-Directory.
[edit] Installation & Configuration
Before you go forward with installing this extension, you should make sure that your wiki is working fine with both HTTP and HTTPS. Otherwise, results may be unpredictable.
Other than that, the installation is straight forward:
- Download the sourcecode into your extensions/ directory
- simply include the File in LocalSettings.php:
-
require_once ( "$IP/extensions/httpsLogin/httpsLogin.php" );
[edit] Changelog
[edit] 1.0
first version documented here. The code has been stable since at least 1.8 or so.
[edit] ToDo
- Some pages other than Special:Userlogin transmit the password, they should be switched to https to. If anyone wants to contribute, contact me.
- This is fixed in the SecurePages-extension.
- do better & automatic translations
[edit] License
GPLv2
A lot of the sourcecode of this extension originally comes from here.
