$conf, $runtime; function_exists('chdir') AND chdir(APP_PATH); $r = 'mysql' == $conf['cache']['type'] ? website_set('runtime', $runtime) : cache_set('runtime', $runtime); } function runtime_truncate() { global $conf; 'mysql' == $conf['cache']['type'] ? website_set('runtime', '') : cache_delete('runtime'); } register_shutdown_function('runtime_save'); ?>wp admin - Need help for WordPress User Session Management?|Programmer puzzle solving

Programmer puzzle solving

    最新消息：Welcome to the puzzle paradise for programmers! Here, a well-designed puzzle awaits you. From code logic puzzles to algorithmic challenges, each level is closely centered on the programmer's expertise and skills. Whether you're a novice programmer or an experienced tech guru, you'll find your own challenges on this site. In the process of solving puzzles, you can not only exercise your thinking skills, but also deepen your understanding and application of programming knowledge. Come to start this puzzle journey full of wisdom and challenges, with many programmers to compete with each other and show your programming wisdom! Translated with DeepL.com (free version)
    你的位置： HOME>matter>wp admin - Need help for WordPress User Session Management?

    wp admin - Need help for WordPress User Session Management?

    matteradmin10PV0评论

    I need help regarding WordPress session management. Follow these steps::

    Bug: Session management and break authentication.

    Steps to reproduce:

    1. Log in to your account using browser 1.

    2. Now, login to the same account using browser 2.

    3. Change the password in browser 1.

    4. Refresh in the browser 2 nothing will happen account remains logged in.

    If this bug is not present than account must log out automatically when the browser 2 is refreshed.

    It is a medium severity bug. What will be the solution? Thanks

    I need help regarding WordPress session management. Follow these steps::

    Bug: Session management and break authentication.

    Steps to reproduce:

    1. Log in to your account using browser 1.

    2. Now, login to the same account using browser 2.

    3. Change the password in browser 1.

    4. Refresh in the browser 2 nothing will happen account remains logged in.

    If this bug is not present than account must log out automatically when the browser 2 is refreshed.

    It is a medium severity bug. What will be the solution? Thanks

    • wp-admin
    • security
    • password
    Share Improve this question edited Jan 10, 2019 at 8:54 bueltge 17.1k7 gold badges62 silver badges97 bronze badges asked Jan 10, 2019 at 6:17 JohnthanJohnthan 1 2
    • I don't think this is a bug, because you have authenticated before and WordPress stores an authentication cookie, to check if you're logged in. Changing your password doesn't force you out if you're logged in on another client. See: codex.wordpress/WordPress_Cookies – Remzi Cavdar Commented Jan 10, 2019 at 6:34
    • PS: I understand your point and it seems to be more like a feature request. You should report it here: core.trac.wordpress – Remzi Cavdar Commented Jan 10, 2019 at 6:38
    Add a comment  | 

    1 Answer 1

    Reset to default 2

    I have gone through the above case. I have checked when you change password you will have the option of logout every where else. So you need to check it. https://www.screencast/t/0tilp5u2

    I will explain it the reason for the same. In this when you login into wordpress.The details are saved in the form of cookies into your browser in form of sessions. However on selecting above button you will be clearing all the session of the website.

    If you do not do it there will be session on the system so you will not be logged out on another browser

    Articles related to this article

    Post a comment

    comment list (0)

    1. No comments so far