Changeset 8701 for trunk/wp-includes/pluggable.php

Timestamp:

08/21/2008 05:40:38 PM (18 years ago)

Author:

ryan

Message:

Option to force SSL. see #7561

File:

• trunk/wp-includes/pluggable.php (modified) (1 diff)

trunk/wp-includes/pluggable.php

@@ -704 +704 @@
         }
 
-        if ( wp_validate_auth_cookie() )
+        if ( $user_id = wp_validate_auth_cookie() ) {
+                // If the user wants ssl but the session is not ssl, redirect.
+                if ( !$secure && get_user_option('use_ssl', $user_id) ) {
+                        if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
+                                wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));
+                                exit();
+                        } else {
+                                wp_redirect('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
+                                exit();
+                        }
+                }
+
                 return;  // The cookie is good so we're done
+        }
 
         // The cookie is no good so force login