search

mvied / wordpress-https

WordPress HTTPS is intended to be an all-in-one solution to using SSL on WordPress sites.
http://wordpress.org/extend/plugins/wordpress-https/
95 stars 41 forks source link

Plugin don't respects $_SERVER['REQUEST_URI'] in backend #37

Open phlegx opened 10 years ago

phlegx commented 10 years ago

Wordpress: 4.0 (http://codex.wordpress.org/Version_4.0)

Works without problems on Wordpress 3.8.1!!! The Wordpress HTTPS plugin has the following configuration:

SSL Host: ssl-reverse-proxy.com/example.com Force SSL Admin: true Force SSL Exklusiv: true Proxy: auto

All links in the backend that are generated with $_SERVER['REQUEST_URI'] are broken.

Example:

/* /wp-admin/plugins.php - line 294 */
...
<form method="post" action="<?php echo esc_url($_SERVER['REQUEST_URI']); ?>" style="display:inline;">

produces:

https://ssl-reverse-proxy.com/wp-admin/network/plugins.php?action=delete-selected&...

but should be:

https://ssl-reverse-proxy.com/example.com/wp-admin/network/plugins.php?action=delete-selected&...