Changeset 42907 for branches/3.7

Timestamp:

04/03/2018 03:29:44 PM (8 years ago)

Author:

ocean90

Message:

Login: Use wp_safe_redirect() when redirecting the login page if forced to use HTTPS.

Merge of [42892] to the 3.7 branch.

Location:

branches/3.7

Files:

• . (modified) (1 prop)
• src (modified) (1 prop)
• src/wp-login.php (modified) (1 diff)

branches/3.7/src/wp-login.php

@@ -15 +15 @@
 if ( force_ssl_admin() && ! is_ssl() ) {
     if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
-        wp_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
+        wp_safe_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
         exit();
     } else {
-        wp_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
+        wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
         exit();
     }