mirror of
https://github.com/10h30/ultimatemember.git
synced 2026-07-18 06:03:38 +09:00
- added security for redirect_to attributes;
- updated readme file;
This commit is contained in:
@@ -209,7 +209,7 @@ function um_user_login( $args ) {
|
||||
|
||||
// Priority redirect
|
||||
if ( ! empty( $args['redirect_to'] ) ) {
|
||||
exit( wp_redirect( $args['redirect_to'] ) );
|
||||
exit( wp_safe_redirect( $args['redirect_to'] ) );
|
||||
}
|
||||
|
||||
// Role redirect
|
||||
|
||||
@@ -177,7 +177,7 @@ function um_check_user_status( $user_id, $args ) {
|
||||
|
||||
// Priority redirect
|
||||
if ( isset( $args['redirect_to'] ) ) {
|
||||
exit( wp_redirect( urldecode( $args['redirect_to'] ) ) );
|
||||
exit( wp_safe_redirect( urldecode( $args['redirect_to'] ) ) );
|
||||
}
|
||||
|
||||
if ( $status == 'approved' ) {
|
||||
|
||||
Reference in New Issue
Block a user