Changeset 8730 for trunk/wp-login.php

Timestamp:

08/25/2008 08:40:34 PM (17 years ago)

Author:

ryan

Message:

Do secure redirect only for admin destinations. see #7561

File:

• trunk/wp-login.php (modified) (1 diff)

trunk/wp-login.php

@@ -424 +424 @@
         $redirect_to = $_REQUEST['redirect_to'];
         // Redirect to https if user wants ssl
-        if ( $secure_cookie )
+        if ( $secure_cookie && false !== strpos($redirect_to, 'wp-admin') )
             $redirect_to = preg_replace('|^http://|', 'https://', $redirect_to);
     } else {