* (bug 25741) Add more data to list=search's srprop
* (bug 25760) counter property still reported by the API when
$wgDisableCounters enabled
-* (bug 25793) Session IDs no longer output by action=login to protect against
- session hijacking
=== Languages updated in 1.17 ===
$result['lgusername'] = $wgUser->getName();
$result['lgtoken'] = $wgUser->getToken();
$result['cookieprefix'] = $wgCookiePrefix;
+ $result['sessionid'] = session_id();
break;
case LoginForm::NEED_TOKEN:
$result['result'] = 'NeedToken';
$result['token'] = $loginForm->getLoginToken();
$result['cookieprefix'] = $wgCookiePrefix;
+ $result['sessionid'] = session_id();
break;
case LoginForm::WRONG_TOKEN: