Manual:Hooks/AbortLogin

Details

 * $user: User object being authenticated against
 * $password: password being submitted (before validity checks)
 * &$retval: a LoginForm class constant to return from authenticateUserData (default is LoginForm::ABORTED)
 * &$msg: name of the error message displayed to the user (MediaWiki 1.18+)

Deprecated
From MediaWiki 1.27 on, the hook is deprecated and superseded by AuthManager functionality. Any logic in it should probably be moved to a class implementing, into the testForAuthentication method.