Changeset 33924

Timestamp:

09/05/2015 09:34:01 PM (9 years ago)

Author:

johnbillion

Message:

When a user with no role logs in, redirect them to the home page rather than their profile screen which they do not have access to.

See #25162

File:

• trunk/src/wp-login.php (modified) (1 diff)

trunk/src/wp-login.php

@@ -852 +852 @@
                 $redirect_to = get_dashboard_url( $user->ID );
             elseif ( !$user->has_cap('edit_posts') )
-                $redirect_to = admin_url('profile.php');
+                $redirect_to = $user->has_cap( 'read' ) ? admin_url( 'profile.php' ) : home_url();
         }
         wp_safe_redirect($redirect_to);