[Assigned] Logout-Link still contains language prefix of a removed language

Refreshing rewrite rules doesn't help. If you access the /de/ path, it no longer exists in the rewrite rules, because the language was removed.

The problem is the following code. WPML does not check whether the language someone has selected in the user profile still exists and always adds the locale prefix to the logout URL. It's not uncommon for someone to use WordPress in their language, even though that language isn't even offered on the website via WPML.

sitepress-multilingual-cms\classes\url-handling\wpml-wp-login-url-converter.php:

public function convert_user_logout_url( $url ) {
$current_user_id = User::getCurrentId();
if ( $current_user_id ) {
$user_locale = User::getMetaSingle( $current_user_id, 'locale' );
if ( ! empty( $user_locale ) ) {
$language_code = $this->sitepress->get_language_code_from_locale( $user_locale );
return $this->url_converter->convert_url( $url, $language_code );
}
}
return $url;
}

As you can see, the locale is read from the profile, translated into the prefix using the icl_languages table, and added to the logout link. A check must be integrated here to determine whether the language is still active, otherwise the rewrite rule for the prefix will no longer be active and the logout link leads to a 404 error.

Steps:

1. Login to the WordPress backend

2. Go to your user profile: /wp-admin/profile.php

3. Change the "Language" to a language, that is not enabled in WPML, for example Spanish.

4. Open the black WordPress toolbar menu in the top right corner where it says "Welcome/Hola <Your name>" and then click the bottom logout link ("Salir" in Spanish) in the dropdown menu.

The link contains the language prefix of the user-specific language. In this example, /es for Spanish:
/es/wp-login.php?action=logout&_wpnonce=xxx
^^^

5. Because this language is not activated in WPML, the logout link leads to a 404 page because the language prefix was not registered in the WordPress rewrite rules.

The solution is to check whether the current backend user language is enabled in WPML. Otherwise, the language prefix cannot be added in the following WPML function:

function convert_user_logout_url() (Path of file: sitepress-multilingual-cms\classes\url-handling\wpml-wp-login-url-converter.php)

I noticed that in the sandbox, no /es/ was written before the logout link. This was probably because no translated content existed yet. I added a page and translated it, and then /es/ was added as well. But the logout still worked.
I then did some research and found out that WPML creates redirects for language-dependent logouts in the htaccess. You can see that here: https://wpml.org/forums/topic/wpml-adding-language-folders-to-htaccess/

Does it do this automatically for every language a user has selected in their profile? Then there should also be an entry for Spanish in the sandbox, right? If so, that would be the reason when a system doesn't have write access to the htaccess. Then the call to a language specific logout fails. I'll test this thoroughly again tomorrow. Thanks for the help!

Please re-enter your sandbox. I changed the user language to Portuguese, and now when you use the logout link in the top right corner of the menu, you get a "File not found" error, not even a designed 404 page like on my sites. I also have this problem on minimal installations.

Logout-Link looks like this: hidden link

I checked whether WPML creates real rewrite rules to redirect the /<language-prefix>/wp-login.php links. I couldn't find any entries. Only in the htaccess, but not for all languages. Actually, only the enabled WPML languages. Why Spanish works in the sandbox is a mystery to me! But Portuguese doesn't!

So it would be really important that only the enabled WPML languages are supported in the "convert_user_logout_url" function.