Changeset 10044 for trunk/src/bp-core/bp-core-functions.php

Timestamp:

08/11/2015 05:03:48 PM (9 years ago)

Author:

r-a-y

Message:

Core: Fix issue with bp_verify_nonce_request() when a port is used in the home URL.

When a site is using a port for their home URL, bp_verify_nonce_request()
can sometimes fail. This is because the port is duplicated twice due to
$_SERVER['HTTP_HOST'] including the port number and we're appending the
port number again with $_SERVER['SERVER_PORT'].

This commit appends $_SERVER['SERVER_PORT'] if $_SERVER['HTTP_HOST']
does not already include the port number and includes a unit test.

Fixes #6528.

File:

• trunk/src/bp-core/bp-core-functions.php (modified) (1 diff)

trunk/src/bp-core/bp-core-functions.php

@@ -2056 +2056 @@
 
     // Maybe include the port, if it's included in home_url()
-    if ( isset( $parsed_home['port'] ) ) {
+    if ( isset( $parsed_home['port'] ) && false === strpos( $_SERVER['HTTP_HOST'], ':' ) ) {
         $request_host = $_SERVER['HTTP_HOST'] . ':' . $_SERVER['SERVER_PORT'];
     } else {