[wp-trac] [WordPress Trac] #14949: Login gives false assurance of having logged out

[WordPress Trac]

#14949: Login gives false assurance of having logged out
-------------------------------------+-------------------------------------
 Reporter:  filosofo                 |       Owner:  rajinsharwar
     Type:  defect (bug)             |      Status:  accepted
 Priority:  normal                   |   Milestone:  Future Release
Component:  Login and Registration   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch dev-feedback   |     Focuses:  administration,
  2nd-opinion has-test-info          |  multisite
-------------------------------------+-------------------------------------
Changes (by ozgursar):

 * keywords:  has-patch needs-testing dev-feedback 2nd-opinion => has-patch
     dev-feedback 2nd-opinion has-test-info


Comment:

 == Patch Testing Report

 Patch Tested:
 https://core.trac.wordpress.org/attachment/ticket/14949/14949.3.diff

 === Environment
 - WordPress: 7.0-alpha-61215-src
 - PHP: 8.2.29
 - Server: nginx/1.29.4
 - Database: mysqli (Server: 8.4.7 / Client: mysqlnd 8.2.29)
 - Browser: Chrome 144.0.0.0
 - OS: macOS
 - Theme: Twenty Twenty-Five 1.4
 - MU Plugins: None activated
 - Plugins:
   * Code Snippets 3.9.4
   * Test Reports 1.2.1

 === Steps taken
 1. Login to WordPress
 2. Enter `http://localhost:8889/wp-login.php?loggedout=true` manually to
 the browser address bar
 3. 🐞 Bug occurs (see screenshot below)
 4. Enter `http://localhost:8889/wp-login.php?loggedout=blablabla` manually
 to the browser address bar
 5. 🐞 Bug occurs (see screenshot below)
 6. Apply patch `14949.3.diff`
 7. ✅ Patch is solving the problem

 === Expected result
 - When logged in, if user manually visits `/wp-login.php?loggedout=true`
 incorrect login form is not displayed. Instead user is redirected to the
 `/wp-admin/` (see screencast below)

 === Additional Notes
 - This issue happens whether `loggedout` is `true` or anything else.
 Tested with `blabla` to demonstrate.
 === Screenshots/Screencast with results
 Before applying patch (/wp-login.php?loggedout=true)
 [[Image(https://i.imgur.com/GNZzmTo.png)]]

 Before applying patch - different query param (/wp-
 login.php?loggedout=blablabla)
 [[Image(https://i.imgur.com/fDaxdtH.png)]]


 ----

 After applying patch (view video to see the redirection)

 https://files.catbox.moe/jldy3v.mp4

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/14949#comment:46>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform