Login action url doesn't follow filtered URL in wp_login_form

[tareq1988]

As someone can change the login url from wp-login.php to something else via a filter, the changed url doesn't take effect on wp_login_form yet. It always uses wp-login.php and I think the URL should also be changed if someone is altering the url via login_url filter.

[tareq1988]

fixes the issue

[SergeyBiryukov]

Same instance in wp-login.php: tags/3.9/src/wp-login.php#L858​.

Note that we use login_post scheme here, and wp_login_url() uses login:
tags/3.9/src/wp-includes/general-template.php#L349​.

So this doesn't look like an oversight, more like a conscious decision to keep wp-login.php as the form handler.

[tareq1988]

I've searched through the codebase and only thing I can see, it uses to determine whether to use SSL or not. In this case login context and it also applies for SSL. Why the context is necessary I don't know yet, but changing the login url is also necessary.

[nacin]

This is designed to be posted to wp-login.php as that is what is actually doing the authentication.