Changeset 29043

Timestamp:

07/09/2014 06:05:00 PM (11 years ago)

Author:

johnbillion

Message:

Persist the "Remember Me" state of the auth cookie when changing your own password. Props jesin. Fixes #27627.

File:

• trunk/src/wp-includes/user.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -1889 +1889 @@
         if ( isset($plaintext_pass) ) {
             wp_clear_auth_cookie();
-            wp_set_auth_cookie($ID);
+
+            // Here we calculate the expiration length of the current auth cookie and compare it to the default expiration.
+            // If it's greater than this, then we know the user checked 'Remember Me' when they logged in.
+            $logged_in_cookie    = wp_parse_auth_cookie( '', 'logged_in' );
+            $default_cookie_life = apply_filters( 'auth_cookie_expiration', ( 2 * DAY_IN_SECONDS ), $ID, false );
+            $remember            = ( ( $logged_in_cookie['expiration'] - time() ) > $default_cookie_life );
+
+            wp_set_auth_cookie( $ID, $remember );
         }
     }