Ticket #16909: 16909.4.patch

wp-login.php

@@ -376 +376 @@
 case 'logout' :
         check_admin_referer('log-out');
         wp_logout();
-
-        $redirect_to = !empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : 'wp-login.php?loggedout=true';
+        $redirect_to = !empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : site_url('wp-login.php?loggedout=true', 'login');
         wp_safe_redirect( $redirect_to );
         exit();
 
@@ -389 +388 @@
         if ( $http_post ) {
                 $errors = retrieve_password();
                 if ( !is_wp_error($errors) ) {
-                        $redirect_to = !empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : 'wp-login.php?checkemail=confirm';
+                        $redirect_to = !empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : site_url('wp-login.php?checkemail=confirm', 'login');
                         wp_safe_redirect( $redirect_to );
                         exit();
                 }