Ticket #2977: 2977.diff

wp-includes/pluggable-functions.php

@@ -245 +245 @@
         $cookie = explode('; ', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie'])); // AJAX scripts must pass cookie=document.cookie
         foreach ( $cookie as $tasty ) {
                 if ( false !== strpos($tasty, USER_COOKIE) )
-                        $user = substr(strstr($tasty, '='), 1);
+                        $user = urldecode(substr(strstr($tasty, '='), 1)); // Nasty double encoding
                 if ( false !== strpos($tasty, PASS_COOKIE) )
-                        $pass = substr(strstr($tasty, '='), 1);
+                        $pass = urldecode(substr(strstr($tasty, '='), 1));
         }
         if ( wp_login( $user, $pass, true ) )
                 return true;