Logged out warnings:

- Don't use <base> tag to set target="_blank". It can break form submission. Instead, set target only on links with JS.
- Fix same domain comparison in wp_auth_check_html() when FORCE_SSL_LOGIN == true.
- Properly show/hide the "Close" button when the dialog is shown multiple times.
See #23295

git-svn-id: https://develop.svn.wordpress.org/trunk@24208 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Ozz
2013-05-08 22:45:58 +00:00
parent bb2a27be5b
commit db72372fcc
3 changed files with 14 additions and 6 deletions
+1 -1
View File
@@ -3921,7 +3921,7 @@ function wp_auth_check_load() {
* Output the HTML that shows the wp-login dialog when the user is no longer logged in
*/
function wp_auth_check_html() {
$login_url = wp_login_url();
$login_url = site_url( 'wp-login.php', 'login_post' );
$current_domain = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'];
$same_domain = ( strpos( $login_url, $current_domain ) === 0 );