do_action( 'auth_cookie_bad_session_token', string[] $cookie_elements )

Compatibility

Present in every tracked release (6.7.7 to 7.1.0).

Parameters

$cookie_elementsstring[]

{ Authentication cookie components. None of the components should be assumed to be valid as they come directly from a client-provided cookie value.
@type string $username User's username.
@type string $expiration The time the cookie expires as a UNIX timestamp.
@type string $token User's session token used.
@type string $hmac The security hash for the cookie.
@type string $scheme The cookie scheme to use.
}

• $usernamestring

  User's username.

• $expirationstring

  The time the cookie expires as a UNIX timestamp.

• $tokenstring

  User's session token used.

• $hmacstring

  The security hash for the cookie.

• $schemestring

  The cookie scheme to use.

Where this hook fires · 1

• wp-includes/pluggable.php:906wp_validate_auth_cookie()

Source code

View on Trac ↗View on GitHub ↗

900<?php901			 *     @type string $expiration The time the cookie expires as a UNIX timestamp.902			 *     @type string $token      User's session token used.903			 *     @type string $hmac       The security hash for the cookie.904			 *     @type string $scheme     The cookie scheme to use.905			 * }906			 */907			do_action( 'auth_cookie_bad_session_token', $cookie_elements );908			return false;909		}910 911		// Ajax/POST grace period set above.912		if ( $expiration < time() ) {913			$GLOBALS['login_grace_period'] = 1;

Changelog

Introduced in 4.0.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.0.4 tag, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.