[wp-trac] [WordPress Trac] #25767: get_home_path() fails if admin is SSL and not the frontend

WordPress Trac noreply at wordpress.org
Wed Oct 30 07:59:39 UTC 2013


#25767: get_home_path() fails if admin is SSL and not the frontend
--------------------------+------------------------------
 Reporter:  GregLone      |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  3.7.1
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------------------

Comment (by mark-k):

 maybe it is good that this fails as this is a bad idea to have that kind
 of a configuration. you are sending the cookies encrypted when you are in
 the admin section but unencrypted when you are on the frontend. If part of
 the site is SSLed then once a user login all of the site should be SSLed
 for him.

 Maybe the true bug here is that you can have a protocol mismatch between
 home and siteurl.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25767#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list