[wp-trac] [WordPress Trac] #36131: User can register / relogin when loged in already.
WordPress Trac
noreply at wordpress.org
Mon Mar 7 01:31:24 UTC 2016
#36131: User can register / relogin when loged in already.
------------------------------------+-----------------------------
Reporter: jashimili | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Login and Registration | Version: 4.4.2
Severity: normal | Keywords:
Focuses: |
------------------------------------+-----------------------------
I don't know how no one didn't noticed this so far, or it's something to
my WordPress installation specific.
But when user is already logged in to the website, the same user can again
go to wp-login.php page and try to login again, that's not so problematic,
until the same user who is logged in try to register again.
So if i login to my website as user1 and go to wp-login.php page again and
try to register i can register my self as user2 even if i am logged in
already.
Is this a bug or just overlooked thing but for users who are already
logged in, we should prevent access to wp-login.php page and functions on
that page.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/36131>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list