Make WordPress Core

Opened 15 years ago

Closed 15 years ago

#14350 closed defect (bug) (invalid)

Login form constant refresh blocking login due to install.php not deleted

Reported by: gazouteast's profile gazouteast Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Upgrade/Install Keywords: close
Focuses: Cc:

Description

In WPMU the final page of install had a warning a long way down the screen, that the /wp-admin/install.php file had to be deleted or renamed before the new site could be used.

Failing to do that blocked all login attempts, and simply reloaded the login screen with no warnings to say why.

In WP 3.0 (new install) the same login behaviour occurs, but there is no warning on the final install screen to delete / rename the install.php file, nor any in the readme or codex.

Proposed - the final install screen needs the warning used in WPMU reintroduced, but in a page position where it is obvious (not 3 screen heights of scrolling down the page) - in the excitement of successfully installing a new site, it is easy to overlook such post-install details. Codex and readme also needs this stated clearly.

Preferably, the install routine should rename the install.php to something like install-done.php automatically, to prevent these problems and reduce user actions / improve the UX and reduce support threads in the forums.

Change History (3)

#1 @nacin
15 years ago

  • Keywords reporter-feedback added; install.php installation routine login.php blocked login documentation removed

index-install.php is nonexistent in 3.0.

MU had some issues in terms of how secure index-install was, but install.php does not need to be renamed in WordPress and we do not recommend editing or renaming core files. If you go to install.php on an installed site, you'll get a notice clearly telling you WordPress is already installed. Additionally, Tools > Network is its own script, and is unrelated to install.php.

The login form refresh during a network installation (Tools > Network) has nothing to do with this (see #12142), and I honestly have no idea what the link between the two is.

#2 in reply to: ↑ description @wpmuguru
15 years ago

  • Keywords close added; reporter-feedback removed

Replying to gazouteast:

In WPMU the final page of install had a warning a long way down the screen, that the /wp-admin/install.php file had to be deleted or renamed before the new site could be used.

The MU install instructions (or readme) suggested you remove /index-install.php. However, there was no requirement to remove it.

#3 @nacin
15 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

There was a security issue with it at one point IIRC, which is probably where this came from.

Closing.

Note: See TracTickets for help on using tickets.