Changeset 7485

Timestamp:

10/31/2013 06:46:20 PM (11 years ago)

Author:

r-a-y

Message:

Remove 'testcookie' hidden field in BP's login forms.

Due to a recent change in WordPress (​http://core.trac.wordpress.org/changeset/25045)
that checks the 'testcookie' value as well as a real cookie value, this
broke login attempts from BP's login forms.

This commit removes the 'testcookie' hidden field so BuddyPress can bypass
the cookie check and allows login attempts to work as before.

Fixes #5219.

Location:

trunk

Files:

• bp-core/bp-core-widgets.php (modified) (2 diffs)
• bp-themes/bp-default/sidebar.php (modified) (1 diff)

trunk/bp-core/bp-core-widgets.php

@@ -78 +78 @@
             <?php do_action( 'bp_before_login_widget_loggedout' ); ?>
 
-            <form name="bp-login-form" id="bp-login-widget-form" class="standard-form" action="<?php echo site_url( 'wp-login.php', 'login_post' ); ?>" method="post">
+            <form name="bp-login-form" id="bp-login-widget-form" class="standard-form" action="<?php echo esc_url( site_url( 'wp-login.php', 'login_post' ) ); ?>" method="post">
                 <label for="bp-login-widget-user-login"><?php _e( 'Username', 'buddypress' ); ?></label>
                 <input type="text" name="log" id="bp-login-widget-user-login" class="input" value="" />
@@ -95 +95 @@
                 <?php endif; ?>
 
-                <input type="hidden" name="testcookie" value="1" />
             </form>
-
 
             <?php do_action( 'bp_after_login_widget_loggedout' ); ?>

trunk/bp-themes/bp-default/sidebar.php

@@ -54 +54 @@
             <?php do_action( 'bp_sidebar_login_form' ); ?>
 
-            <input type="hidden" name="testcookie" value="1" />
         </form>