Skip to content

Commit

Permalink
- added security for redirect_to attributes;
Browse files Browse the repository at this point in the history
- updated readme file;
  • Loading branch information
nikitasinelnikov committed Jul 27, 2020
1 parent 3e2f77a commit c466e3d
Show file tree
Hide file tree
Showing 3 changed files with 11 additions and 3 deletions.
2 changes: 1 addition & 1 deletion includes/core/um-actions-login.php
Expand Up @@ -209,7 +209,7 @@ function um_user_login( $args ) {

// Priority redirect
if ( ! empty( $args['redirect_to'] ) ) {
exit( wp_redirect( $args['redirect_to'] ) );
exit( wp_safe_redirect( $args['redirect_to'] ) );
}

// Role redirect
Expand Down
2 changes: 1 addition & 1 deletion includes/core/um-actions-register.php
Expand Up @@ -177,7 +177,7 @@ function um_check_user_status( $user_id, $args ) {

// Priority redirect
if ( isset( $args['redirect_to'] ) ) {
exit( wp_redirect( urldecode( $args['redirect_to'] ) ) );
exit( wp_safe_redirect( urldecode( $args['redirect_to'] ) ) );
}

if ( $status == 'approved' ) {
Expand Down
10 changes: 9 additions & 1 deletion readme.txt
Expand Up @@ -76,9 +76,17 @@ Ultimate Member has a range of extensions that allow you to extend the power of

Our official [theme](https://ultimatemember.com/theme/) is purpose built for websites that have logged in and out users. The [theme](https://ultimatemember.com/theme/) has deep integration with Ultimate Member plugin and the extensions, different header designs for logged-in/out users and works alongside the Beaver Builder and Elementor page builders.

= Our other plugins =

In addition to Ultimate Member, we also have two other plugins: [ForumWP](https://forumwpplugin.com/) and [JobBoardWP](https://wordpress.org/plugins/jobboardwp).

= ForumWP =

In addition to Ultimate Member we also have another plugin called [ForumWP](https://forumwpplugin.com/). ForumWP is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community.
[ForumWP](https://forumwpplugin.com/) is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community.

= JobBoardWP =

[JobBoardWP](https://wordpress.org/plugins/jobboardwp) is a job board plugin which adds a modern job board to your website. Display job listings and allow employers to submit and manage jobs all from the front-end.

= Development * Translations =

Expand Down

0 comments on commit c466e3d

Please sign in to comment.