WordPress.org

1. jrodgers
   Member
   Posted 3 years ago #

   A user is trying to pasword protect a post which is working fine, however, their concern is that they are only prompted for the password the first time accessing the post, how does the password protected post function in maintaining that state, is there a cookie set? is it in the session? can it be overridden, so that after viewing the accessibility of the user is removed?

2. figaro
   Member
   Posted 3 years ago #

   Just from experimenting is seems to be a cookie. If you clear cookies through your browser then you are prompted for the password again. I'm not sure how, or even if, you can impact that from the server or WP...it may just be a local browser thing.

   But, someone else may know better...

3. jrodgers
   Member
   Posted 3 years ago #

   thanks figaro, tracked it down to

   wp-postpass_(really long hex number, probably encrypted)

   now, how can i clear this? is there a wp setting which will allow me to set the expires value for this cookie?

4. jrodgers
   Member
   Posted 3 years ago #

   this issue can be fixed by changing the value in wp-pass.php

   change
   setcookie('wp-postpass_' . COOKIEHASH, $_POST['post_password'], time() + 864000, COOKIEPATH);

   to
   setcookie('wp-postpass_' . COOKIEHASH, $_POST['post_password'], 0, COOKIEPATH);

   makes it end when the browser window is closed/session ends

5. figaro
   Member
   Posted 3 years ago #

   Great...thanks for the follow-up.

Topic Closed

This topic has been closed to new replies.