Support » Fixing WordPress » Using password on a page and page stays open
4 years, 11 months ago
I’m using the option to password protect one page.
After having signed on with assigned password the page stays open and it won’t ask again for the password.
Where can I change so this page will ask for the password at least at every new browser session?
If I delete all cookies and history related info by using IE9-Tools-Internet-Options-Web History and all alternatives I’ll still stay signed on to that page.
What’s even more disturbing is that I’ll also stay signed on to my site as admin.
How is this possible and how can I fix this?
Where are the files located as they aren’t deleted?
Can this, in my opinion strange behaviour, be changed in some way?
I’m using the Theme Twenty Eleven.
4 years, 8 months ago
After having googled a lot I’ve found the solution to the problem of not being able to set the timeout time after entering the password on a password protected page.
What was before the update to 3.4.1 done in the file wp-pass.php must now be done in the file wp-login.php, and it’s to be done on line 393.
Example where I’ve changed to 900 = 15 minutes
// 10 days 864000 ändrat till 900 = 15 min
setcookie( 'wp-postpass_' . COOKIEHASH, $wp_hasher->HashPassword( stripslashes( $_POST['post_password'] ) ), time() + 900, COOKIEPATH )