Changeset 34931 for trunk/src/wp-includes/option.php

Timestamp:

10/08/2015 03:04:41 AM (10 years ago)

Author:

johnbillion

Message:

Correctly set the secure flag for the test cookie based on the login URL scheme, and the same for the user settings cookies based on the admin URL scheme.

Fixes #34159

File:

• trunk/src/wp-includes/option.php (modified) (1 diff)

trunk/src/wp-includes/option.php

@@ -813 +813 @@
 
     // The cookie is not set in the current browser or the saved value is newer.
-    $secure = ( 'https' === parse_url( site_url(), PHP_URL_SCHEME ) );
+    $secure = ( 'https' === parse_url( admin_url(), PHP_URL_SCHEME ) );
     setcookie( 'wp-settings-' . $user_id, $settings, time() + YEAR_IN_SECONDS, SITECOOKIEPATH, null, $secure );
     setcookie( 'wp-settings-time-' . $user_id, time(), time() + YEAR_IN_SECONDS, SITECOOKIEPATH, null, $secure );