[wp-trac] [WordPress Trac] #11289: Logout Causes Internal Server Error

WordPress Trac wp-trac at lists.automattic.com
Mon Nov 30 23:44:03 UTC 2009


#11289: Logout Causes Internal Server Error
--------------------------+-------------------------------------------------
 Reporter:  miqrogroove   |       Owner:       
     Type:  defect (bug)  |      Status:  new  
 Priority:  high          |   Milestone:  2.9  
Component:  General       |     Version:  2.8.4
 Severity:  critical      |    Keywords:       
--------------------------+-------------------------------------------------

Comment(by miqrogroove):

 This might need to be split into multiple tickets.

 IE is apparently hiding the "Do you really want to log out" link, which
 makes the nonce system more of a liability than a helpful security
 measure.  A user unable to logout may be in worse shape than a user
 unintentionally logged out.

 WordPress fails to even provide a nonce in some cases.  The "Please try
 again" link references the previous page, with no nonce or explanation of
 what happened.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11289#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list