Ticket #26706: 26706.diff

wp-includes/default-filters.php

@@ -301 +301 @@
 add_filter( 'authenticate', 'wp_authenticate_username_password',  20, 3 );
 add_filter( 'authenticate', 'wp_authenticate_spam_check',         99    );
 
+// Default user checking filters
+add_filter( 'get_currentuserinfo', 'wp_validate_auth_cookie' );
+add_filter( 'get_currentuserinfo', 'wp_validate_logged_in_cookie', 20 );
+
 unset($filter, $action);

wp-includes/pluggable.php

@@ -97 +97 @@
                 return false;
         }
 
-        if ( ! $user = wp_validate_auth_cookie() ) {
-                 if ( is_blog_admin() || is_network_admin() || empty( $_COOKIE[LOGGED_IN_COOKIE] ) || !$user = wp_validate_auth_cookie( $_COOKIE[LOGGED_IN_COOKIE], 'logged_in' ) ) {
-                        wp_set_current_user( 0 );
-                        return false;
-                 }
+        /**
+         * Allows filtering the user parsed from the current request data.
+         *
+         * The default filters use this to determine the current user from the
+         * request's cookies, if available.
+         *
+         * @since 3.9.0
+         *
+         * @param int|boolean $user User ID if determined, or false otherwise
+         */
+        $user = apply_filters( 'get_currentuserinfo', false );
+        if ( ! $user ) {
+                wp_set_current_user( 0 );
+                return false;
         }
 
         wp_set_current_user( $user );

wp-includes/user.php

@@ -147 +147 @@
 }
 
 /**
+ * Validates logged in cookie.
+ *
+ * Checks the logged_in cookie if the previous auth cookie could not be
+ * validated and parsed.
+ *
+ * @since 3.9.0
+ */
+function wp_validate_logged_in_cookie( $user ) {
+        if ( $user ) {
+                return $user;
+        }
+
+        if ( is_blog_admin() || is_network_admin() || empty( $_COOKIE[LOGGED_IN_COOKIE] ) ) {
+                return false;
+        }
+
+        return wp_validate_auth_cookie( $_COOKIE[LOGGED_IN_COOKIE], 'logged_in' );
+}
+
+/**
  * Number of posts user has written.
  *
  * @since 3.0.0