Make WordPress Core

Opened 4 years ago

Closed 2 years ago

Last modified 2 years ago

#14748 closed defect (bug) (fixed)

Password Protected posts do not support ssl or punctuation in passwods

Reported by: emerygjr Owned by: dd32
Milestone: 3.4 Priority: normal
Severity: major Version: 3.0.1
Component: General Keywords: has-patch 3.2-early
Focuses: Cc:


When the WordPress site is run in protected mode using https and the page is password protected inside WordPress, the generated URL uses http instead of the required HTTPS. The result is that the submit delivers a blank page.

Attachments (1)

14748.diff (1.8 KB) - added by dd32 3 years ago.

Download all attachments as: .zip

Change History (5)

comment:1 dd323 years ago

  • Keywords has-patch 3.2-early added; password removed
  • Milestone changed from Awaiting Review to Future Release
  • Owner set to dd32
  • Status changed from new to accepted

In addition to this, Passwords cannot contain punctuation due to incorrect handling of escaping methods.

I'm attaching a patch which takes care of escaping and ssl.

dd323 years ago

comment:2 dd323 years ago

  • Summary changed from Error on Password protected page to Password Protected posts do not support ssl or punctuation in passwods

comment:3 ryan2 years ago

  • Resolution set to fixed
  • Status changed from accepted to closed

In [19677]:

Use site_url() to link to wp-pass.php. Props dd32. fixes #14748

comment:4 ryan2 years ago

  • Milestone changed from Future Release to 3.4
Note: See TracTickets for help on using tickets.