laceous

Due to lack of interest (both my own and based on the number of downloads) this plugin will not be updated for WP 3.0
WordPress’ auth cookies include a built-in expiration date (either 2 or 14 days depending on if the ‘Remember Me’ option is checked). Even if you remove the client-side cookie (by manually logging out or just closing your browser if ‘Remember Me’ wasn’t checked when logging in) the data that was stored within the cookie is still valid until the expiration date is reached.
This could be an issue if someone managed to “steal” your cookie(s). They would still be able to access your website for some time into the future.
This plugin will immediately invalidate your auth cookies when you manually log out. This, of course, also means that you have to manually click ‘Log out’ for this plugin to work properly (you can’t just close your browser to remove any cookies that expire at the end of the session). This won’t prevent session hijacking, but should limit the amount of time that an attacker can access your website.

Invalidate Logged Out Cookies

This plugin will immediately invalidate your auth cookies when you manually log out.

Scott Kingsley Clark

linickx

If you want to integrate the wordpress authentication magic into another script within your website you may come across authentication issues because your code cannot read the wordpress cookie.
By default the wordpress cookie exactly matches the URL of your installation, this plugin removes any subfolders from the cookie so that your whole domain has access to it.
For Example if you have wordpress installed in http://www.mydomain.com/wordpress/ any php stored in http://www.mydomain.com/mymagiccode/ cannot see the cookie due to browser security. This plugin changes the path to http://www.mydomain.com/ so that any php code on your site can access the cookie, so in our above example http://www.mydomain.com/mymagiccode/checkauthentication.php can now check the cookie to see if you have logged into wordpress.
NEW: Now you can allow cookies to be used across subdomains! Here are some examples that you can now access cookies from:
<ul>
<li>http://www.mydomain.com/</li>
<li>http://test.mydomain.com/</li>
<li>http://www.mydomain.com/blog/</li>
<li>http://test.mydomain.com/new/</li>
<li>http://forum.mydomain.com/getwordpresslogin.php</li>
</ul>
<h3>Multi-blog Installs</h3>
It is possible to use this plugin such that if you are logged into one WordPress site, then you are auto-magically logged into the second, but there are some caveats!
<ol>
<li>The Username & Password MUST be the same on Both!</li>
<li>The Security Keys https://codex.wordpress.org/Editing_wp-config.php#Security_Keys Need to be the same on Both!</li>
</ol>
<h3>Support</h3>
Comments on my website are welcome, but please post <a href="https://wordpress.org/tags/root-cookie?forum_id=10#postform" rel="ugc">in this WordPress Forum</a>

root Cookie

Even after so much time since the last update, your plugin worked perfectly and helped me fix my website. Thank you so much!!

THANK YOU!!

Changes the cookie default path to / (i.e. the whole domain.com not just domain.com/blog) with an option to go across subdomains

Invalidate Logged Out Cookies vs root Cookie