[wp-trac] [WordPress Trac] #7141: pluggable.php: auth_redirect() contains invalid test for SSL request

WordPress Trac wp-trac at lists.automattic.com
Sat Jun 14 20:48:10 GMT 2008


#7141: pluggable.php: auth_redirect() contains invalid test for SSL request
---------------------+------------------------------------------------------
 Reporter:  wet      |       Owner:  anonymous
     Type:  defect   |      Status:  new      
 Priority:  normal   |   Milestone:           
Component:  General  |     Version:           
 Severity:  normal   |    Keywords:           
---------------------+------------------------------------------------------
 [http://trac.wordpress.org/browser/trunk/wp-
 includes/pluggable.php?rev=8069#L645 auth_redirect()] tries to locate
 'http' in $_SERVER!['REQUEST_URI'] to determine whether  SSL is used:

 {{{
 if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
         wp_redirect(preg_replace('|^http://|', 'https://',
 $_SERVER['REQUEST_URI']));

 }}}

 $_SERVER!['REQUEST_URI'] won't contain any protocol part, so this test
 will not work.

 The [http://trac.wordpress.org/browser/trunk/wp-
 includes/pluggable.php?rev=8069#L649 alternate code path] apparently
 builds yet another SSL admin URI.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7141>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list