WordPress.org

Make WordPress Core

Opened 4 years ago

Closed 4 years ago

#13423 closed defect (bug) (worksforme)

Password Protected Page displaying without requiring password

Reported by: jrishel Owned by: ryan
Milestone: Priority: normal
Severity: normal Version: 2.9.2
Component: Security Keywords: reporter-feedback
Focuses: Cc:

Description

created a page in self-hosted install of wordpress 2.9.2 and marked the page as password-protected. Later discovered that page was viewable when not signed in without prompting for a password.

Attachments (1)

Password-Protected.diff (580 bytes) - added by duck_ 4 years ago.

Download all attachments as: .zip

Change History (3)

comment:1 duck_4 years ago

  • Keywords reporter-feedback added; password page removed

Cannot reproduce on 2.9.2 or trunk. Any more details?

Did notice that there is a very minor discrepancy between how the JavaScript updates the post status to "Password Protected", but then when the post is updated it reads "Password protected"... patch attached to change to capital if it matters at all.

duck_4 years ago

comment:2 dd324 years ago

  • Milestone Unassigned deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Did you enter the password in at all? The password is stored in a cookie in the browser for future page loads.

Try clearing your browser cache.

Closing as worksforme, If problem persists on either a clean install, or on a computer which has not viewed the page, feel free to re-open with more details.

Note: See TracTickets for help on using tickets.