Changeset 42892

Timestamp:

04/03/2018 02:31:16 PM (6 years ago)

Author:

ocean90

Message:

Login: Use wp_safe_redirect() when redirecting the login page if forced to use HTTPS.

File:

• trunk/src/wp-login.php (modified) (1 diff)

trunk/src/wp-login.php

@@ -15 +15 @@
 if ( force_ssl_admin() && ! is_ssl() ) {
     if ( 0 === strpos( $_SERVER['REQUEST_URI'], 'http' ) ) {
-        wp_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
+        wp_safe_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
         exit();
     } else {
-        wp_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
+        wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
         exit();
     }