Opened 11 months ago
Last modified 11 months ago
#21043 new enhancement
is_user_logged_in() returns true even if user is not logged in
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | Awaiting Review |
| Component: | Users | Version: | 3.4 |
| Severity: | normal | Keywords: | dev-feedback |
| Cc: | scribu |
Description
If you have wp_set_current_user(), then is_user_logged_in() will always return true. This goes against my understanding of the role of wp_set_current_user() especially as explained by the documentation:
"Some WordPress functionality is based on the current user and not based on the signed in user. Therefore, it opens the ability to edit and perform actions on users who aren't signed in."
But then we look at is_user_logged_in() and it just says - can we get_current_user()?
Suddenly wp_set_current_user is looking like wp_switch_logged_in_user(), which I doubt is the intent of that function.
Note: See
TracTickets for help on using
tickets.
