brandonskypimenta at gmail
Jul 5, 2012, 2:14 AM
Post #10 of 17
(530 views)
Permalink
|
In my environment, there's no "[mark as patrolled]" link. Is there
something missing here? Where do you optain this token? What's wrong?
On Thu, Jul 5, 2012 at 5:38 AM, Krinkle <krinklemail [at] gmail> wrote:
> Hi Brandon,
>
> I saw that bug report just now (without this thread as context).
>
> This is not a bug and nothing to worry about whatsoever.
> For those not up to date with bug 38189 (resolved as invalid), the user is
> trying to access the following kind of url:
>
> http://wiki.example.org/mw/index.php?title=Test&action=markpatrolled
>
> That url returns a session error message because of an invalid token.
> Which is
> correct because the token (the one not present in the url) does not match
> the
> security token associated with the recent change — the recent change of
> which
> the id is also not given in the url?
>
> To patrol an edit, use the [mark as patrolled] links found in the
> interface.
> Although you shouldn't have to deal with the url manually, if you're
> interested,
> they should look like this:
>
>
> http://wiki.example.org/mw/index.php?action=markpatrolled&rcid=1234&token=[security_hash]
>
>
> So all this changing of permissions of session data directories has been
> unnecessary, your MediaWiki install is in a healthy condition. That is,
> assuming:
> * Editing a page works fine
> * That the broken url showing the session token error was indeed created
> by you
> manually, and not referred to by the software.
>
> -- Krinkle
>
> [1] I created a diagram a few months back that may help:
> http://commons.wikimedia.org/wiki/File:Commons_Mark_as_patrolled.png
>
>
> On Jul 5, 2012, at 9:37 AM, Brandon Pimenta wrote:
>
> > I reported it to Bugzilla. See bug
> > 38189<https://bugzilla.wikimedia.org/show_bug.cgi?id=38189>
> > .
> >
> > I still get the error message. The permissions of the 'sky',
> > 'wikisessiondata', and 'nonwebaccessible' folders are read and write for
> > owner and read only for staff and world. Maybe this command will help:
> >
> > sudo chmod 777 /Users/sky/nonwebaccessible/wikisessiondata
> >
> > Only admins can use the sudo command.
> >
> > On Wed, Jul 4, 2012 at 6:32 PM, Platonides <Platonides [at] gmail> wrote:
> >
> >> On 04/07/12 07:44, Brandon Pimenta wrote:
> >>> Same error: There seems to be a problem with your login session; this
> >>> action has been canceled as a precaution against session hijacking. Go
> >> back
> >>> to the previous page, reload that page and then try again.
> >>>
> >>> I think this a bug. I entered the following code in my
> LocalSettings.php:
> >>>
> >>> session_save_path( '/Users/sky/nonwebaccessible/wikisessiondata' );
> >>>
> >>> Really? Why is this happening? What is causing the problem?
> >>
> >> What user is the script running as?
> >> Maybe it's running as a user called apache which can't write into the
> >> folder of user sky...
> >>
> >>
> >> _______________________________________________
> >> MediaWiki-l mailing list
> >> MediaWiki-l [at] lists
> >> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >>
> > _______________________________________________
> > MediaWiki-l mailing list
> > MediaWiki-l [at] lists
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
> _______________________________________________
> MediaWiki-l mailing list
> MediaWiki-l [at] lists
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
|
