WordPress.org
Get WordPress

Make WordPress Core

Opened 6 years ago

Last modified 6 years ago

#45296 new defect (bug)

Serious side-effects when login in another tab after session expiration in first tab

Reported by: trejder's profile trejder Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Users Keywords:
Focuses: administration Cc:

Description (last modified by SergeyBiryukov)

A. STEPS TO REPRODUCE:

  1. Start editing a new blog post.
  2. Open a preview of it in some other browser tab.
  3. Leave it open and hibernate computer for several hours (or otherwise expire the session without refreshing / closing the editor).
  4. Add a new comment to that blog that requires moderation or otherwise cause owner to receive e-mail with a link to a blog.
  5. Click on received link. New browser tab or window will open. Session is expired so login screen appears (correct!).
  6. Login to WordPress.
  7. Go back to the other / left open / hibernated browser tabs and try to do anything.

In that "old" / other tab you're logged-off / you have session expired (even though you have just logged in again), but WordPress isn't able to handle this situation gracefully.

B. SIDE-EFFECTS

B1. UNABLE TO ADD AN IMAGE

  1. An attempt to add an image causes image browser to display "loading knob" infinitely.

B2. UNABLE TO SAVE THE DRAFT

  1. An attempt to save the draft actually DESTROYS the draft in the database.
  2. Clicking this button causes WordPress to display login screen (even though you're already logged in; see below).
  3. From this moment on your draft preview (the other "old" tab) will be constantly showing "Page not found".
  4. After publishing and unpublishing the page it gets even worse -- only "Page not found" page title appears in tab and tab is constantly being refreshed endlessly by the browser.

B3. UNABLE TO LOGIN

  1. An attempt to refresh the page displays login screen (even though you're already logged in).
  2. Logging in is impossible. After login WordPress displays login page again and says that browser has cookies disabled (not true).
  3. To solve this problem one must restart entire browser (cleaning session cookies?) and login again.

C. Conclusions

Restarting browser solves the B3 and B1 problems only. B2 problem partially remains. Wordpress is able to save the draft, but still doing this incorrectly and later isn't able to show preview of the post, claiming that page is not found or reloading page forever.

To solve last part of B2 problem one must restart browser, re-login and save the draft several times.

Change History (2)

#2 @SergeyBiryukov
6 years ago

  • Component changed from General to Users
  • Description modified (diff)
  • Focuses administration added
Note: See TracTickets for help on using tickets.