Changeset 8730 for trunk/wp-includes/pluggable.php

Timestamp:

08/25/2008 08:40:34 PM (18 years ago)

Author:

ryan

Message:

Do secure redirect only for admin destinations. see #7561

File:

• trunk/wp-includes/pluggable.php (modified) (2 diffs)

trunk/wp-includes/pluggable.php

@@ -694 +694 @@
 
         // If https is required and request is http, redirect
-        if ( $secure && !is_ssl() ) {
+        if ( $secure && !is_ssl() && false !== strpos($_SERVER['REQUEST_URI'], 'wp-admin') ) {
                 if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
                         wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));
@@ -706 +706 @@
         if ( $user_id = wp_validate_auth_cookie() ) {
                 // If the user wants ssl but the session is not ssl, redirect.
-                if ( !$secure && get_user_option('use_ssl', $user_id) ) {
+                if ( !$secure && get_user_option('use_ssl', $user_id) && false !== strpos($_SERVER['REQUEST_URI'], 'wp-admin') ) {
                         if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
                                 wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));