gpcf
/
auth_export
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4 Commits
1 Branch
0 Tags
142 KiB
Lua 100%
 
Go to file
Gabriel Pérez-Cerezo 77f7a30167 SECURITY: Fix mediawiki merging accounts 
Mediawiki turns any number of _ into whitespace, so Foo__Bar and
Foo_Bar and Foo_Bar_ would be mapped to the same account, leading to
account takeover.
 		2020-02-24 13:43:11 +01:00
README.md Added link to bugtracker 2019-04-17 12:04:27 +02:00
channel.lua First commit 2019-04-17 09:15:32 +02:00
init.lua SECURITY: Fix mediawiki merging accounts 2020-02-24 13:43:11 +01:00
webmail.lua First commit 2019-04-17 09:15:32 +02:00

README.md

Auth_export mod for minetest

This is an ad-hoc mod written to interface Minetest with Mediawiki (see the mediawiki plugin). It is intended only for usage with the http server bundled with the mediawiki plugin.

Installation

To set up your minetest installation to communicate with the minetest server, edit your "minetest.conf":

# enable curl/http on that mod
secure.http_mods = mail
secure.http_mods = auth_export

BUGS

Bugs are tracked on Hemiptera. Send bugs as an e-mail to MinetestMediawiki@bugs.linux-forks.de

TODO

  • Improve architecture – This mod's architecture is rather ugly right now
  • Integrate with various ban mechanisms
  • Add service-specific access rights, such as a "wiki" priv for wiki access, or "nowiki" xban flag to ban access to wiki

Credits

This mod is essentially scavenged from the webmail mod by Thomas Rudin.