[wp-trac] [WordPress Trac] #22254: "Do you really want to log out" message after already logged out

WordPress Trac noreply at wordpress.org
Thu Feb 28 16:03:07 UTC 2013


#22254: "Do you really want to log out" message after already logged out
------------------------------+--------------------
 Reporter:  Ov3rfly           |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.6
Component:  Administration    |     Version:  3.4.2
 Severity:  normal            |  Resolution:
 Keywords:  has-patch commit  |
------------------------------+--------------------

Comment (by nacin):

 A few things:

  * I don't think this is the right place for this code. Rather than going
 in wp_nonce_ays() — where messages for failed nonces get printed — the
 nonce check should be avoided all together, in wp-login.php's action =
 logout branch.

  * I'm not sure this is necessary at all. The user may be "logged out" by
 having the logged_in cookie drop, but they may still have admin cookies
 and it would be good for those to be removed. By providing an extra step,
 we can ensure that they have an opportunity to explicitly log out and
 remove all cookies.

  * For more, see #14949, which covers the logging-in-when-already-logged-
 in problem. This is just the reverse — logging out when already logged
 out.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/22254#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list