Ticket #21982: check_wp_authenticate_cookie.patch

wp-includes/user.php

@@ -117 +117 @@
  * Authenticate the user using the WordPress auth cookie.
  */
 function wp_authenticate_cookie($user, $username, $password) {
-        if ( is_a($user, 'WP_User') ) { return $user; }
-
-        if ( empty($username) && empty($password) ) {
+        if ( !is_a($user, 'WP_User') && empty($username) && empty($password) ) {
                 $user_id = wp_validate_auth_cookie();
                 if ( $user_id )
                         return new WP_User($user_id);