[wp-trac] [WordPress Trac] #9817: wp_login_url() doesn't urlencode() the redirect value

WordPress Trac wp-trac at lists.automattic.com
Thu May 14 08:20:55 GMT 2009


#9817: wp_login_url() doesn't urlencode() the redirect value
--------------------------+-------------------------------------------------
 Reporter:  Viper007Bond  |       Owner:                         
     Type:  defect (bug)  |      Status:  new                    
 Priority:  normal        |   Milestone:  Unassigned             
Component:  General       |     Version:  2.8                    
 Severity:  normal        |    Keywords:  has-patch needs-testing
--------------------------+-------------------------------------------------
 To reproduce:

 1. Log out of your dev blog.[[BR]]
 2. Visit `http://yoursite.com/wp-
 admin/index.php?foo=bar&test=ing&word=press`.[[BR]]
 3. You will be redirected to `http://yoursite.com/wp-
 login.php?redirect_to=http://yoursite.com/wp-
 admin/index.php?foo=bar&test=ing&word=press`.[[BR]]
 4. After logging in, you will end up at `http://yoursite.com/wp-
 admin/index.php?foo=bar` due to the lack of URL encoding in the
 `redirect_to` value.


 Attached patch `urlencode()`'s the value so that the redirect works
 properly.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9817>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list