[wp-trac] [WordPress Trac] #45296: Serious side-effects when login in another tab after session expiration in first tab

WordPress Trac noreply at wordpress.org
Tue Nov 6 08:31:26 UTC 2018


#45296: Serious side-effects when login in another tab after session expiration in
first tab
--------------------------+-----------------------------
 Reporter:  trejder       |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 = A. STEPS TO REPRODUCE:

 1. Start editing a new blog post.
 2. Open a preview of it in some other browser tab.
 3. Leave it open and hibernate computer for several hours (or otherwise
 expire the session without refreshing / closing the editor).
 4. Add a new comment to that blog that requires moderation or otherwise
 cause owner to receive e-mail with a link to a blog.
 5. Click on received link. New browser tab or window will open. Session is
 expired so login screen appears (correct!).
 6. Login to WordPress.
 7. Go back to the other / left open / hibernated browser tabs and try to
 do anything.

 In that "old" / other tab you're logged-off / you have session expired
 (even though you have just logged in again), but WordPress isn't able to
 handle this situation gracefully.

 = B. SIDE-EFFECTS

 == B1. UNABLE TO ADD AN IMAGE

 1. An attempt to add an image causes image browser to display "loading
 knob" infinitely.

 == B2. UNABLE TO SAVE THE DRAFT

 1. An attempt to save the draft actually DESTROYS the draft in the
 database.
 2. Clicking this button causes WordPress to display login screen (even
 though you're already logged in; see below).
 3. From this moment on your draft preview (the other "old" tab) will be
 constantly showing "Page not found".
 4. After publishing and unpublishing the page it gets even worse -- only
 "Page not found" page title appears in tab and tab is constantly being
 refreshed endlessly by the browser.

 == B3. UNABLE TO LOGIN

 1. An attempt to refresh the page displays login screen (even though
 you're already logged in).
 2. Logging in is impossible. After login Wordpress displays login page
 again and says that browser has cookies disabled (not true).
 3. To solve this problem one must restart entire browser (cleaning session
 cookies?) and login again.

 = C. Conclusions

 Restarting browser solves the B3 and B1 problems only. B2 problem
 partially remains. Wordpress is able to save the draft, but still doing
 this incorrectly and later isn't able to show preview of the post,
 claiming that page is not found or reloading page forever.

 To solve last part of B2 problem one must restart browser, re-login and
 save the draft several times.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/45296>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list