Automattic / Automattic/wp-super-cache
password-protected pages break
- Dominant language
- PHP
- Stars
- 436
- Forks
- 130
- Avg merge
- 15h 11m
- Merged PRs (30d)
- 10
Description
### Impacted plugin
Super Cache
### Quick summary
WordPress pages that are password protected never succeed to show the content.
### Steps to reproduce
In WordPress a page can be password protected.
The page first shows only a password prompt. When that is given, the actual content of the page appears.
This seems to be broken in WP Super Cache. Submitting the password produces only the password prompt again.
Including the URL of the page in the Rejected URL Strings setting fails to fix it. Even deleting the cache fails to fix it.
An example page is https://aacny.org/wordpress/tsl/. The correct password is TSL.
### Site owner impact
Fewer than 20% of the total website/platform users
### Severity
Moderate
### What other impact(s) does this issue have?
No revenue impact
### If a workaround is available, please outline it here.
None that I know of.
### Platform (Simple and/or Atomic)
Simple
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the issue on the example WordPress page using the stated password, then inspect the Super Cache handling for password-protected pages and rejected URL strings. Done means submitting the password reveals the page content instead of returning the password prompt again, while caching remains functional.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, wordpress
- Domain
- backend, performance, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100