Changeset 25450

Timestamp:

09/16/2013 05:39:30 PM (13 years ago)

Author:

nacin

Message:

Introduce post_password_expires filter to control the expiration of the post password cookie.

props Viper007Bond for initial patch.
fixes #21466.

File:

• trunk/src/wp-login.php (modified) (1 diff)

trunk/src/wp-login.php

@@ -315 +315 @@
         $hasher = new PasswordHash( 8, true );
 
-        // 10 days
-        setcookie( 'wp-postpass_' . COOKIEHASH, $hasher->HashPassword( wp_unslash( $_POST['post_password'] ) ), time() + 10 * DAY_IN_SECONDS, COOKIEPATH );
+        /**
+         * Filter the life of the post password cookie.
+         *
+         * By default, the cookie expires 10 days from now.
+         * To turn this into a session cookie, return 0.
+         *
+         * @since 3.7.0
+         * @param int $expires The expiry time, as passed to setcookie().
+         */
+        $expire = apply_filters( 'post_password_expires', time() + 10 * DAY_IN_SECONDS );
+        setcookie( 'wp-postpass_' . COOKIEHASH, $hasher->HashPassword( wp_unslash( $_POST['post_password'] ) ), $expire, COOKIEPATH );
 
         wp_safe_redirect( wp_get_referer() );