[wp-trac] [WordPress Trac] #7558: wp-login $redirect_to breaks tinyMCE under SSL

WordPress Trac wp-trac at lists.automattic.com
Wed Aug 20 20:42:47 GMT 2008


#7558: wp-login $redirect_to breaks tinyMCE under SSL
----------------------------+-----------------------------------------------
 Reporter:  bitethemailman  |       Owner:  anonymous                                         
     Type:  defect          |      Status:  new                                               
 Priority:  normal          |   Milestone:                                                    
Component:  General         |     Version:  2.5                                               
 Severity:  major           |    Keywords:  wp-login tinymce ssl editor popup javascript https
----------------------------+-----------------------------------------------
 SSL logins use https URLs that break the pre-initalization sequence for
 tinyMCE. once a login is successful, the redirect uses a shorthand URL
 leading to the dashboard. this shorthand fails to remove the "S" from the
 "https".

 The problem went something like this: when a user tried to view a popup
 window in tinyMCE, a blank popup would appear, and the error console (oh,
 glorious firebug and safari consoles) would display a confusing version of
 a javascript security warning, saying that it refused to pull up a non-
 secured function from a secure requesting URL. The fix is as follows.

 In version 2.5, wp-login.php edits:

 line 347 old:

 {{{
 $redirect_to = 'wp-admin/';
 }}}

 CHANGE TO:
 {{{
 $redirect_to = get_option('siteurl') . '/wp-admin/';
 }}}

 don't miss the new leading slash.
 Hope this helps!

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7558>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list