2 ms·

> Setting the session flag for "this user is logged in" before checking (or even decoding!) the password seems rather backwards to me. Yeah, that seems like a

> Setting the session flag for "this user is logged in" before checking (or even decoding!) the password seems rather backwards to me. Yeah, that seems like a problem regardless of whether or not you're parsing JSON.

rch 10y ago
Probably a symptom of the PHP multiverse: anything that can happen, has happened.
- oblio 10y ago
  And will continue to happen in a Wordpress setup somewhere.