[wp-hackers] wp 3.7

[Otto]

On Fri, Oct 25, 2013 at 4:02 PM, Luke Bryan <lukebryan at sharefaith.com> wrote:
> Here are the steps to reproduce the problem:
>
> Go to https://make.wordpress.org/core/wp-login.php, click on the icon by
> the url and go to more information.
>
> View cookies, remove all cookies.
>
> Now when you log in it will first give you the message "*ERROR*: Cookies
> are blocked or not supported by your browser. You must enable
> cookies<http://www.google.com/cookies.html>to use WordPress."


That's actually intentional. The test cookie is set on the load of the
wp-login.php screen. When you log in, it checks for the existence of
that test cookie and won't log you in without it.

This is to give better feedback than before, for login attempts where
cookies were disabled, but the username and password given was
correct. See http://core.trac.wordpress.org/ticket/24961 .

Now, obviously, if you clear the cookies between loading the login
page and logging in, then you're going to have problems, because it's
testing for the existence of the cookie it just set on the login
screen.

-Otto