Changeset 42903 for branches/4.1/src/wp-login.php

Timestamp:

04/03/2018 03:29:12 PM (8 years ago)

Author:

ocean90

Message:

Login: Use wp_safe_redirect() when redirecting the login page if forced to use HTTPS.

Merge of [42892] to the 4.1 branch.

Location:

branches/4.1

Files:

• . (modified) (1 prop)
• src/wp-login.php (modified) (1 diff)

branches/4.1/src/wp-login.php

@@ -15 +15 @@
 if ( force_ssl_admin() && ! is_ssl() ) {
         if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
-                wp_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
+                wp_safe_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
                 exit();
         } else {
-                wp_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
+                wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
                 exit();
         }