mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-06-28 14:20:15 +00:00
Forcing SSL logins now forces SSL for the entire admin, with no middle ground.
fixes #10267. git-svn-id: https://develop.svn.wordpress.org/trunk@28609 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -3387,15 +3387,7 @@ function is_ssl() {
|
||||
* @return bool True if forced, false if not forced.
|
||||
*/
|
||||
function force_ssl_login( $force = null ) {
|
||||
static $forced = false;
|
||||
|
||||
if ( !is_null( $force ) ) {
|
||||
$old_forced = $forced;
|
||||
$forced = $force;
|
||||
return $old_forced;
|
||||
}
|
||||
|
||||
return $forced;
|
||||
return force_ssl_admin( $force );
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -4305,9 +4297,6 @@ function wp_auth_check_html() {
|
||||
$current_domain = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'];
|
||||
$same_domain = ( strpos( $login_url, $current_domain ) === 0 );
|
||||
|
||||
if ( $same_domain && force_ssl_login() && ! force_ssl_admin() )
|
||||
$same_domain = false;
|
||||
|
||||
/**
|
||||
* Filter whether the authentication check originated at the same domain.
|
||||
*
|
||||
|
||||
Reference in New Issue
Block a user