[wp-trac] [WordPress Trac] #29900: WordPress Logout Redirect Failure Notice

WordPress Trac noreply at wordpress.org
Thu Oct 9 10:08:49 UTC 2014


#29900: WordPress Logout Redirect Failure Notice
------------------------------------+-----------------------------
 Reporter:  noam@…                  |      Owner:
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  trunk
 Severity:  normal                  |   Keywords:
  Focuses:  ui, administration      |
------------------------------------+-----------------------------
 When attempting to logout, if the wpnonce is not valid you are greeted
 with the following message:

 Example URL: domain.com/wp-login.php?action=logout&_wpnonce=05a47423b1
 Message: "You are attempting to log out of domain.com. Do you really want
 to log out?"

 A screenshot is attached.

 This is important to prevent accidental logouts.

 However, this message also appears when the user is not even logged in to
 the website. For example:

 http://wpengine.com/wp-login.php?action=logout&_wpnonce=05a47423b1
 https://www.wpsitecare.com/wp-login.php?action=logout&_wpnonce=05a47423b1
 https://getflywheel.com/wp-login.php?action=logout&_wpnonce=05a47423b1

 This should not occur.

 If you are logged out, the "Do you really want to log out.." message and
 link provides no value as you are already logged out and you have no
 alternative.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29900>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list