[wp-trac] [WordPress Trac] #32408: Auth cookie expire vs expiration

WordPress Trac noreply at wordpress.org
Fri May 15 12:16:11 UTC 2015


#32408: Auth cookie expire vs expiration
------------------------------------+------------------------------
 Reporter:  walkinonwat3r           |       Owner:
     Type:  enhancement             |      Status:  new
 Priority:  normal                  |   Milestone:  Awaiting Review
Component:  Login and Registration  |     Version:  2.8
 Severity:  normal                  |  Resolution:
 Keywords:  reporter-feedback       |     Focuses:
------------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:   => reporter-feedback
 * version:  4.2.2 => 2.8
 * component:  Users => Login and Registration


Comment:

 If you take a look at [https://github.com/WordPress/WordPress/blob/master
 /wp-includes/pluggable.php#L834-L855 the source of wp_set_auth_cookie()]
 you'll see that the actual cookie expiration time (the `$expire` variable)
 gets set to the value of the expiration time plus two hours. The cookie is
 only set to a per-session cookie if the user doesn't click the 'Remember
 me' checkbox when they log in.

 Do you have a plugin on your site which is overriding the
 `wp_set_auth_cookie()` function? Or do you have a custom login form which
 hides the 'Remember me' checkbox?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32408#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list