Jump to content

Extensió:LoginNotify

From mediawiki.org
This page is a translated version of the page Extension:LoginNotify and the translation is 29% complete.
Manual d'extensions de MediaWiki
LoginNotify
Notes de la versió: estable
Implementació Activitat d'usuari
Descripció Notifica als usuaris els inicis de sessió sospitosos
Autor(s) Brian Wolff (Bawolffdiscussió)
Darrera versió 0.1
MediaWiki >= 1.46
Canvis a la base de dades
Domini virtual virtual-LoginNotify
  • $wgLoginNotifyExpiryNewIP
  • $wgLoginNotifyExpiryKnownIP
  • $wgLoginNotifyEnableOnSuccess
  • $wgLoginNotifyAttemptsKnownIP
  • $wgLoginNotifyDenyUnknownIPs
  • $wgLoginNotifyCookieExpire
  • $wgLoginNotifyUseCentralId
  • $wgLoginNotifyCookieDomain
  • $wgLoginNotifySeenBucketSize
  • $wgLoginNotifySeenExpiry
  • $wgLoginNotifyMaxCookieRecords
  • $wgLoginNotifyAttemptsNewIP
  • $wgLoginNotifyCheckKnownIPs
  • $wgLoginNotifySecretKey
Licence Llicència MIT
Descàrrega
Traduir l'extensió LoginNotify si està disponible a translatewiki.net
Incidències Tasques obertes · Informar d'un error

L'extensió LoginNotify us notifica quan algú inicia sessió al vostre compte. Es pot configurar per enviar avisos després d'un cert nombre d'intents d'inici de sessió fallits (el nombre és configurable i pot ser diferent entre IP/dispositius desconeguts i IP/dispositius coneguts). També pot enviar avisos a Echo (que també es poden enviar per correu electrònic) per a inicis de sessió correctes des d'un IP que no utilitzeu normalment. Opcionalment, es pot integrar a l'extensió CheckUser per determinar si l'inici de sessió prové d'una adreça IP que no utilitzeu normalment. També pot establir una galeta per intentar determinar si l'inici de sessió prové d'un dispositiu que utilitzeu normalment.

Instal·lació

This extension comes with MediaWiki 1.40 and later, so you do not need to download it. The remaining configuration instructions must still be followed.

This extension requires the Echo extension to be installed.

  • Download and move the extracted LoginNotify folder to your extensions/ directory.
    Developers and code contributors should install the extension from Git instead, using:
    cd extensions/
    git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/LoginNotify
    
  • Add the following code at the bottom of your LocalSettings.php file:
    wfLoadExtension( 'LoginNotify' );
    
  • Configure as required.
  • Yes Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.

This extension can optionally integrate with the CheckUser extension if it is installed, but does not require it.

Ús

Once LoginNotify is installed, whenever a user logs into the wiki, their IP subnet is cached on the server and a cookie named loginnotify_prevlogins is stored in their browser. These tokens, optionally along with CheckUser tables, are used to see if subsequent logins are coming from a known IP/device.

If CentralAuth and CheckUser are installed, it will check the IP not only for the current wiki, but also the ten wikis where the user is most active.

Configuració

Parameters that can be set in the LocalSettings.php file:

Name Description Default
$wgLoginNotifyAttemptsKnownIP The number of failed login attempts to permit from a known IP before a notification is triggered. 10
$wgLoginNotifyAttemptsNewIP The number of failed login attempts to permit from a new IP before a notification is triggered. 3
$wgLoginNotifyExpiryKnownIP The time-to-live of the count of failed login attempts from a known IP (from the time of the first failed attempt). 604800 (7 dies)
$wgLoginNotifyExpiryNewIP The time-to-live of the count of failed login attempts from a new IP (from the time of the first failed attempt). 1209600 (14 dies)
$wgLoginNotifyCheckKnownIPs Whether to trigger a notification after failed logins from known IPs. true
$wgLoginNotifyEnableOnSuccess Whether to trigger a notification after successful logins from unknown IPs. true
$wgLoginNotifyEnableForPriv Set different default notification preferences for different user groups. For user groups that have any of the user rights listed in this array, the preferences specified in Hooks:getOverridenOptions() are on by default. ("Failed login attempts" web notifications and "Login from new computer" web notifications.) [ "editinterface", "userrights" ]
$wgLoginNotifySecretKey Use this key instead of $wgSecretKey to generate the HMACs for the cookie. null
$wgLoginNotifyCookieExpire Expiration of the cookie. 15552000 (180 dies)
$wgLoginNotifyCookieDomain To allow sharing login cookies between sites on different subdomains, set this to the parent domain name. null
$wgLoginNotifyMaxCookieRecords Maximum number of users (records) to track as having successfully logged in on a particular device. 6
$wgLoginNotifyCacheLoginIPExpiry How long to cache IPs in memcache. Set to false to disable; set to 0 to cache forever. 5184000 (60 dies)