Bug re password protected sites in wordpress
In 29.0.1 i discovered this 'bug'.
I manage a WordPress site http://www.mainehomelessplanning.org/ we use password protect or limit access to documents access for some documents under development. When testing these this past week I discovered that the documents which should show a password request, just showed the document. Testing this in Chrome, IE, an Safari the password request shows up correctly.
I know when we rolled out the site this functionality was working as expected. I am assuming that some change in FireFox in an update introduced this problem. I use a plain FireFox with the stock theme and not many plugins. Given it works correctly in the other browsers, I have to see this as a FireFox Bug.
All Replies (7)
Let me try to get this straight. With other browsers you need a password, but with Firefox you don't?
Did you remember to log out beforehand?
But thanks for the reminder. But yes I did log out. I turned off various plugins. What I do know is that a month ago and before this worked as expected.Feel free to try it for yourself the test protected documents are on the lower left menu of mainehomelessplanning.org
In Chrome just now I see the password request, in FireFox I go right to seeing the document without the password request. See the attached screen shots.
It is likely that you still have a cookie set that makes the server recognize you.
Details like websites remembering you (log you in automatically) are stored in a cookie.
Clear the cache and cookies only from websites that cause problems.
"Clear the Cache":
- Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
- Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"
Maine Homeless Planning;
Protected: Test Document 3
Test Document 3
This content is password protected. To view it please enter your password below:
Test Document 2
This content is password protected. To view it please enter your password below:
Looks like the password works fine. It's just your system. I think cor-el is correct about the cookies. Since the user does need a password for access, there should not be a security issue to worry about. Either remember to sign out, or have that cookie removed when Firefox closes.
Thanks, but it is still not working for me. I removed the cookies for mainehomelessplanning.org, closed the browser, checked to see if they were gone and went to the site and without logging in, I go straight to the protected document. I will continue testing and see if I can see any cause at my end that would explain it. It is comforting, but confusing, that you do not see it as I do.
Clif
If clearing cookies didn't help then it is possible that the cookies.sqlite file that stores the cookies got corrupted.
- Rename (or delete) cookies.sqlite (cookies.sqlite.old) and delete other present cookies files like cookies.sqlite-journal in the Firefox profile folder in case the file cookies.sqlite got corrupted.
You can also try to test this in a new Private Browsing mode window as that would give you an independent set of cookies.