Thread:Extension talk:LDAP Authentication/Mediawiki CSRF (CVE-2010-1150) and LdapAuth plugin?/reply

Ugh. I haven't tested this, and I never use the API. I'll try to test this when I get a chance. If you have a non-production system, and have the chance to test it, let me know if it works.