![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 19 years ago
Closed 19 years ago
#4188 closed defect (bug) (worksforme)
redirect_to within wp-login.php breaks with an authentication failure
| Reported by: | oaoao | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | General | Version: | 2.1.3 |
| Severity: | normal | Keywords: | |
| Cc: | Focuses: |
Description
When submitting from an external form to wp-login.php:
<form action="/wp-login.php?redirect_to=%2F" method="post">
everything operates normally if the user is authenticated on the first try. He is properly redirected to the redirect_to URL, which is "/" in this case.
However, if the login attempt failed on the first try, and a user is passed to the Wordpress login page, redirect_to seems to be lost in the new form, and the user will be redirected to his profile page.
Change History (5)
#2
in reply to: ↑ description
@
19 years ago
#4
@
19 years ago
- Resolution fixed
- Status closed → reopened
Oops, committed to wrong bug. Ignore that commit message.
#5
@
19 years ago
- Milestone 2.4
- Resolution → worksforme
- Status reopened → closed
Cannot recreate, either with "Subscriber" or "Admin" account. Both types carry the redirect_to value on invalid logins and redirect to that URL after a successful login (following an indefinitely long chain of unsuccessful logins).
I'm unable to replicate this bug. ENV:2.1.3
After the first request the form gets a hidden input with the value.
It's carryed on to every time the page loads