[wp-trac] [WordPress Trac] #9817: wp_login_url() doesn't
urlencode() the redirect value
WordPress Trac
wp-trac at lists.automattic.com
Thu May 14 08:20:55 GMT 2009
#9817: wp_login_url() doesn't urlencode() the redirect value
--------------------------+-------------------------------------------------
Reporter: Viper007Bond | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Unassigned
Component: General | Version: 2.8
Severity: normal | Keywords: has-patch needs-testing
--------------------------+-------------------------------------------------
To reproduce:
1. Log out of your dev blog.[[BR]]
2. Visit `http://yoursite.com/wp-
admin/index.php?foo=bar&test=ing&word=press`.[[BR]]
3. You will be redirected to `http://yoursite.com/wp-
login.php?redirect_to=http://yoursite.com/wp-
admin/index.php?foo=bar&test=ing&word=press`.[[BR]]
4. After logging in, you will end up at `http://yoursite.com/wp-
admin/index.php?foo=bar` due to the lack of URL encoding in the
`redirect_to` value.
Attached patch `urlencode()`'s the value so that the redirect works
properly.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/9817>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list