Changeset 6220

Timestamp:

10/10/2007 07:26:21 PM (17 years ago)

Author:

markjaquith

Message:

check for a match against a lowercase host in wp_safe_redirect(). props BoltClock. fixes #5114 for 2.3.1

File:

• branches/2.3/wp-includes/pluggable.php (modified) (1 diff)

branches/2.3/wp-includes/pluggable.php

@@ -437 +437 @@
     $allowed_hosts = (array) apply_filters('allowed_redirect_hosts', array($wpp['host']), $lp['host']);
 
-    if ( isset($lp['host']) && !in_array($lp['host'], $allowed_hosts) )
+    if ( isset($lp['host']) && ( !in_array($lp['host'], $allowed_hosts) && $lp['host'] != strtolower($wpp['host'])) )
         $location = get_option('siteurl') . '/wp-admin/';