[wp-trac] [WordPress Trac] #39311: New user activation welcome page links to the wrong site

[WordPress Trac]

#39311: New user activation welcome page links to the wrong site
-------------------------------------+------------------------------
 Reporter:  tmoore41                 |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Login and Registration   |     Version:  4.7
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:  multisite
-------------------------------------+------------------------------

Comment (by tmoore41):

 Replying to [comment:16 Ipstenu]:
 > * The entire install is a network install with a network admin: WP-
 admin/network
 > * Each site has a front: example.com and sub,example.com
 > * And an admin: example.com/WP-admin
 >
 > But the network does not have a public front facing aspect, hence there
 is no 'network site' that one is directed to.
 >
 > Moving on.
 >
 > By default, the main site doesn't need to be accessible to log in,
 because WordPress redirects you to YOUR site if you try to log in to it
 and don't have an account there.

 Is this really true?  What if I use htaccess rules to prevent access to
 the 'main site', because that is only there for the network admin to log
 in to.

 > If that's not happening on your install, there's the problem. But I did
 just build a brand new install to test that on and the results on a clean
 install were clear. WP properly redirects. This sounds a lot like your
 configuration broke default behavior so now... what did you do? :)

 Access to the main site is denied to everyone except the network admin
 because a) security and b) this is not a public site... there is nothing
 here for people to see.  I have only left a couple of exceptions to this
 (wp-cron, wp-login, etc).

 All I am concerned about here are the links on the welcome page.  It seems
 to be an artificial restriction that I must have have a publicly
 accessible main site so that magic redirection works, when it is trivially
 easy to change the welcome page to avoid this.  Honestly, what is the
 principle behind this?  Why does magic redirection have to be used in this
 case, when it is so easy to avoid?

 > Try it on a CLEAN install. Then we can start adding min your features to
 see where this broke and why.

 I believe it broke in the design phase.

 > Because WP does know your primary site already and should be redirecting
 you.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39311#comment:17>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform