Forcing SSL logins now forces SSL for the entire admin, with no middle ground.

fixes #10267.


git-svn-id: https://develop.svn.wordpress.org/trunk@28609 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin
2014-05-29 03:58:41 +00:00
parent 06c142a1a5
commit 961459ee31
5 changed files with 20 additions and 35 deletions

View File

@@ -3387,15 +3387,7 @@ function is_ssl() {
* @return bool True if forced, false if not forced.
*/
function force_ssl_login( $force = null ) {
static $forced = false;
if ( !is_null( $force ) ) {
$old_forced = $forced;
$forced = $force;
return $old_forced;
}
return $forced;
return force_ssl_admin( $force );
}
/**
@@ -4305,9 +4297,6 @@ function wp_auth_check_html() {
$current_domain = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'];
$same_domain = ( strpos( $login_url, $current_domain ) === 0 );
if ( $same_domain && force_ssl_login() && ! force_ssl_admin() )
$same_domain = false;
/**
* Filter whether the authentication check originated at the same domain.
*