[wp-trac] [WordPress Trac] #22254: "Do you really want to log out" message after already logged out
WordPress Trac
noreply at wordpress.org
Thu Feb 28 16:03:07 UTC 2013
#22254: "Do you really want to log out" message after already logged out
------------------------------+--------------------
Reporter: Ov3rfly | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.6
Component: Administration | Version: 3.4.2
Severity: normal | Resolution:
Keywords: has-patch commit |
------------------------------+--------------------
Comment (by nacin):
A few things:
* I don't think this is the right place for this code. Rather than going
in wp_nonce_ays() — where messages for failed nonces get printed — the
nonce check should be avoided all together, in wp-login.php's action =
logout branch.
* I'm not sure this is necessary at all. The user may be "logged out" by
having the logged_in cookie drop, but they may still have admin cookies
and it would be good for those to be removed. By providing an extra step,
we can ensure that they have an opportunity to explicitly log out and
remove all cookies.
* For more, see #14949, which covers the logging-in-when-already-logged-
in problem. This is just the reverse — logging out when already logged
out.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/22254#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list