From 9f97ddf45c77688d8a57a44fde81d19203d70555 Mon Sep 17 00:00:00 2001 From: nacin Date: Thu, 24 May 2012 21:22:09 +0000 Subject: [PATCH] When auth_redirect() detects a logged out user and the target page was about.php?updated, then issue a message welcoming them. This is to prevent it from being so jolting if you are taken to the login screen after an update. In WordPress 3.4, the changes to wp_salt() provide for extra security, but will cause a log-out for any installs without 8 unique keys and salts in wp-config.php (with some exceptions). Properly re-issuing cookies, even for the logged in user, is not easily doable via admin/includes/update-core.php, as that file is included long after the headers are sent. see #19599. git-svn-id: http://core.svn.wordpress.org/trunk@20887 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-login.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/wp-login.php b/wp-login.php index 6428572fa..ffe4e1e70 100644 --- a/wp-login.php +++ b/wp-login.php @@ -634,6 +634,8 @@ default: $errors->add('registered', __('Registration complete. Please check your e-mail.'), 'message'); elseif ( $interim_login ) $errors->add('expired', __('Your session has expired. Please log-in again.'), 'message'); + elseif ( strpos( $redirect_to, 'about.php?updated' ) ) + $errors->add('updated', __( 'You have successfully updated WordPress! Please log back in to experience the awesomeness.' ), 'message' ); // Clear any stale cookies. if ( $reauth )