[wp-trac] [WordPress Trac] #35103: login_url Filter is now applied to Login Form Action Attribute

[WordPress Trac]

#35103: login_url Filter is now applied to Login Form Action Attribute
------------------------------------+--------------------
 Reporter:  salcode                 |       Owner:
     Type:  defect (bug)            |      Status:  new
 Priority:  normal                  |   Milestone:  4.4.1
Component:  Login and Registration  |     Version:  4.4
 Severity:  normal                  |  Resolution:
 Keywords:                          |     Focuses:
------------------------------------+--------------------

Comment (by DrewAPicture):

 @johnbillion Care to weigh in?

 I think this report further highlights the downside of wp-login.php
 serving both as the "login URL" and post handler for the login form.

 And in lieu of handing form submission outside of wp-login.php, such as
 how comment submissions were moved to `wp_handle_comment_submission()` in
 [34799], we're kind of stuck in a back-compat rabbit hole.

 Seems like two best options would be:
 1. Revert back to using `site_url()` as before [34213]
 2. As in [35897], use `set_url_scheme()` with `login_post` and add a third
 parameter to `wp_login_url()` that effectively bypasses the `login_url`
 filter on return.

 !#2 feels kind of gross, but it makes sense if we want to continue to
 promote standardization of `wp_login_url()`/`wp_registration_url()` as in
 #31495.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35103#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform