[wp-trac] [WordPress Trac] #37333: Cookie remains valid after post password is changed

[WordPress Trac]

#37333: Cookie remains valid after post password is changed
-------------------------------+-------------------------
 Reporter:  henry.wright       |       Owner:
     Type:  defect (bug)       |      Status:  closed
 Priority:  normal             |   Milestone:
Component:  Posts, Post Types  |     Version:
 Severity:  normal             |  Resolution:  worksforme
 Keywords:                     |     Focuses:
-------------------------------+-------------------------
Changes (by johnbillion):

 * status:  new => closed
 * resolution:   => worksforme
 * component:  General => Posts, Post Types
 * milestone:  Awaiting Review =>


Comment:

 Thanks for the report.

 When a user enters a password for a password protected post, the password
 is stored encrypted in the `wp-postpass` cookie. If the password on the
 post changes, the cookie no longer contains the correct encrypted
 password. I've tested this behaviour, and the password protected post
 becomes unavailable again once the password is changed.

 I suspect your issue is related to caching, either at the network level or
 at the browser level. I'd take a look at that as a first point of
 debugging.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37333#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform