Question

When you login to a password protected page, WordPress sets a cookie that looks like wp-postpass_hash.

This cookie seems to stick around forever. I’d like to be able to provide the user with a ‘log out’ link. Is there a way for me to find and delete this particular cookie if I don’t know the hash? Maybe there’s a way to get the cookie by finding it based on ‘wp-postpass’?

I’ve seen other solutions for altering WordPress’ core files to change the expiration date of the cookie, but this won’t last when there’s an update. Maybe there’s a function I could write to alter the expiration of this particular cookie?

Any tips? Thanks!

Answer 1

<?php
$pass_cookie='';
foreach($_COOKIE as $key=>$value){
  if(!strncmp($key,"wp-postpass_",12)){
    $pass_cookie = $key;
    break;
  }
}
if($pass_cookie){
  setcookie($pass_cookie,'',0);
}
?>

I would rather use something like the above – it doesn’t depend on the position of the wp_postpass cookie