How to invalidate wordpress_logged_in cookie via backchannel logout
We assume that the cookie should no longer allow re-login once wp user session destroy –all has been executed. Is this assumption wrong? The cookie has nothing to do with re-logging in, the command will destroy their current active sessions, and has nothing to do with future sessions. A user can create new sessions by … Read more