Changeset 8701 for trunk/wp-includes/pluggable.php

Timestamp:

08/21/2008 05:40:38 PM (17 years ago)

Author:

ryan

Message:

Option to force SSL. see #7561

File:

• trunk/wp-includes/pluggable.php (modified) (1 diff)

trunk/wp-includes/pluggable.php

@@ -704 +704 @@
     }
 
-    if ( wp_validate_auth_cookie() )
+    if ( $user_id = wp_validate_auth_cookie() ) {
+        // If the user wants ssl but the session is not ssl, redirect.
+        if ( !$secure && get_user_option('use_ssl', $user_id) ) {
+            if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
+                wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));
+                exit();
+            } else {
+                wp_redirect('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
+                exit();
+            }
+        }
+
         return;  // The cookie is good so we're done
+    }
 
     // The cookie is no good so force login