Changeset 25107 for trunk/src/wp-includes/pluggable.php

Timestamp:

08/23/2013 09:26:58 PM (11 years ago)

Author:

azaozz

Message:

Logging in: when the Remember Me checkbox is checked, make sure the browser continues to send the expired cookies so the "login grace period" for POST and AJAX requests works. Fixes #24735.

File:

• trunk/src/wp-includes/pluggable.php (modified) (1 diff)

trunk/src/wp-includes/pluggable.php

@@ -650 +650 @@
 function wp_set_auth_cookie($user_id, $remember = false, $secure = '') {
     if ( $remember ) {
-        $expiration = $expire = time() + apply_filters('auth_cookie_expiration', 14 * DAY_IN_SECONDS, $user_id, $remember);
+        $expiration = time() + apply_filters('auth_cookie_expiration', 14 * DAY_IN_SECONDS, $user_id, $remember);
+        // Ensure the browser will continue to send the cookie after the expiration time is reached.
+        // Needed for the login grace period in wp_validate_auth_cookie().
+        $expire = $expiration + ( 12 * HOUR_IN_SECONDS );
     } else {
         $expiration = time() + apply_filters('auth_cookie_expiration', 2 * DAY_IN_SECONDS, $user_id, $remember);