cherry-pick uri security fix

[git.ikiwiki.info.git] / doc / plugins / passwordauth.mdwn

diff --git a/doc/plugins/passwordauth.mdwn b/doc/plugins/passwordauth.mdwn
index 2ee06b7adf65b4f77fd3bdb879a80258108a40cc..5e3dbfbaf6cd4994abddc4f64b3df484f22de350 100644 (file)
--- a/doc/plugins/passwordauth.mdwn
+++ b/doc/plugins/passwordauth.mdwn
@@ -6,4 +6,12 @@ into the wiki. It also handles registering users, mailing passwords, and
 changing passwords in the prefs page.
 
 It is enabled by default, but can be turned off if you want to only use
 changing passwords in the prefs page.
 
 It is enabled by default, but can be turned off if you want to only use

-some other form of authentication, such as [[openid]].
+some other form of authentication, such as [[httpauth]] or [[openid]].
+
+When the `account_creation_password` configuration option is enabled with
+a pass-phrase, this plugin prompts for the password when creating an
+account as a implistic anti-spam measure.
+(Some wikis edited by a particular group use an account creation password
+as an "ask an existing member to get an account" system.)
+
+