vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-10-04 06:37:06 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

New secure cookie protocol. see #5367

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@6387 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2007-12-16 17:41:59 +00:00
parent 3155e09967
commit bb7922cd42
7 changed files with 171 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wp-login.php
+19 -18
View File
@@ -288,7 +288,6 @@ case 'login' :
default:
$user_login = '';
$user_pass = '';
$using_cookie = FALSE;
if ( !isset( $_REQUEST['redirect_to'] ) || is_user_logged_in() )
$redirect_to = 'wp-admin/';
@@ -296,25 +295,31 @@ default:
$redirect_to = $_REQUEST['redirect_to'];
if ( $http_post ) {
// If cookies are disabled we can't log in even with a valid user+pass
if ( empty($_COOKIE[TEST_COOKIE]) )
$errors['test_cookie'] = __('<strong>ERROR</strong>: WordPress requires Cookies but your browser does not support them or they are blocked.');
$user_login = $_POST['log'];
$user_login = sanitize_user( $user_login );
$user_pass = $_POST['pwd'];
$rememberme = $_POST['rememberme'];
do_action_ref_array('wp_authenticate', array(&$user_login, &$user_pass));
} else {
$cookie_login = wp_get_cookie_login();
if ( ! empty($cookie_login) ) {
$using_cookie = true;
$user_login = $cookie_login['login'];
$user_pass = $cookie_login['password'];
$user = wp_validate_auth_cookie();
if ( !$user ) {
$errors['expiredsession'] = __('Your session has expired.');
} else {
$user = new WP_User($user);
// If the user can't edit posts, send them to their profile.
if ( !$user->has_cap('edit_posts') && ( empty( $redirect_to ) || $redirect_to == 'wp-admin/' ) )
$redirect_to = get_option('siteurl') . '/wp-admin/profile.php';
wp_safe_redirect($redirect_to);
exit();
}
}
do_action_ref_array('wp_authenticate', array(&$user_login, &$user_pass));
// If cookies are disabled we can't log in even with a valid user+pass
if ( $http_post && empty($_COOKIE[TEST_COOKIE]) )
$errors['test_cookie'] = __('<strong>ERROR</strong>: WordPress requires Cookies but your browser does not support them or they are blocked.');
if ( $user_login && $user_pass && empty( $errors ) ) {
$user = new WP_User(0, $user_login);
@@ -322,15 +327,11 @@ default:
if ( !$user->has_cap('edit_posts') && ( empty( $redirect_to ) || $redirect_to == 'wp-admin/' ) )
$redirect_to = get_option('siteurl') . '/wp-admin/profile.php';
if ( wp_login($user_login, $user_pass, $using_cookie) ) {
if ( !$using_cookie )
wp_setcookie($user_login, $user_pass, false, '', '', $rememberme);
if ( wp_login($user_login, $user_pass) ) {
wp_set_auth_cookie($user->ID, $rememberme);
do_action('wp_login', $user_login);
wp_safe_redirect($redirect_to);
exit();
} else {
if ( $using_cookie )
$errors['expiredsession'] = __('Your session has expired.');
}
}