[wp-trac] [WordPress Trac] #39903: is_user_logged_in() true on ajax after cookie has been deleted

[WordPress Trac]

#39903: is_user_logged_in() true on ajax after cookie has been deleted
--------------------------+------------------------------
 Reporter:  esemlabel     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Users         |     Version:  4.7.2
 Severity:  major         |  Resolution:
 Keywords:  needs-patch   |     Focuses:
--------------------------+------------------------------

Comment (by dd32):

 This sounds like a case where the front-end logged in cookies are removed,
 but the admin/ajax authentication cookies still exist (So the user would
 still have access to `/wp-admin/`). Does that sound correct?

 If that's the case, I'm not sure there's anything to do here - unless the
 admin was to check the front-end cookies still exist and are valid too?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39903#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform