WordPress.org

Make WordPress Core

Opened 3 months ago

Closed 3 months ago

#49472 closed feature request (wontfix)

feature request: make the logout a separate page

Reported by: Iamhere Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Login and Registration Keywords:
Focuses: Cc:

Description

Hello

To reduce load on my server, I like to use Basic Auth password protection on wp-login.php page.

This works fine for wordpress only sites (limited users needing to login), however, where woocommerce is in use, when a customer of that site tries to log out, they are also presented with the basic auth pop-up asking for credentials.

I have tried many ways to get around this, but it seems the issue primarily comes down to the fact that WP uses the login page for the logout functions too.

More info here of what I have tried: https://wordpress.stackexchange.com/questions/352829/basic-auth-htaccess-on-wp-login-but-allow-logout-from-woocommerce

I also switched to protection of wp-admin folder, but this does not work properly.

Could WP have a seperate wp-logout file ? Then this issue is no more! I realise that's a big change, but unless there is another way to achieve my goal (I don't want to use plugins - basic auth in Apache .htaccess is 5 lines of code), I don't think there is any alternative.

Thanks

Change History (2)

#1 @SergeyBiryukov
3 months ago

  • Component changed from General to Login and Registration

#2 @johnbillion
3 months ago

  • Milestone Awaiting Review deleted
  • Resolution set to wontfix
  • Status changed from assigned to closed

Your customers will need to be able to log in again, which they won't be able to do if the login screen is behind BasicAuth. If you're using a front end log in system, then it should have a front end log out system too.

Regardless, this is an Apache question and you should be able to achieve this by applying BasicAuth to the login screen selectively based on the value in the action URL query variable. The if directive in mod_rewrite allows for this IIRC.

Note: See TracTickets for help on using tickets.