Setup cookies security based on user preference
authorcsteipp <csteipp@wikimedia.org>
Thu, 22 Aug 2013 03:42:32 +0000 (20:42 -0700)
committerChad Horohoe <chadh@wikimedia.org>
Sat, 24 Aug 2013 18:04:23 +0000 (11:04 -0700)
commitc99b0dcaa69982b27d7df3f86361cf460ac10d89
tree5906b4bf8f6da3eaecb09413fec7e46f55cbe679
parente5c31319930e4f69feddc86fd6eda5d70245c209
Setup cookies security based on user preference

Use the user pref instead of the login form checkbox for setting up
cookie security on login.

The preferences menu is still broken (always shows checked, even if
preference has been turned off), but this will log the user in (over
https), and then redirect them back to http if they have selected to
not use https. Likewise, if they have the default preference to use
https, they get the forceHTTPS cookie and other cookies secure.

Change-Id: I08f67b35f355ef193ae86cb9cca3799e247ead4e
includes/DefaultSettings.php
includes/SkinTemplate.php
includes/specials/SpecialUserlogin.php
includes/templates/Userlogin.php