[wp-trac] [WordPress Trac] #61366: A password change should not destroy a user's session data.
WordPress Trac
noreply at wordpress.org
Sun Jun 16 14:40:58 UTC 2024
#61366: A password change should not destroy a user's session data.
------------------------------------+------------------------------
Reporter: snicco | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Login and Registration | Version: 6.5.3
Severity: normal | Resolution:
Keywords: | Focuses:
------------------------------------+------------------------------
Comment (by lkraav):
Hm, nuking old sessions seems prudent for security purposes?
If I changed my password, I think I'd want any other logged in sessions to
get logged out?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/61366#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list