Changeset 2465

Timestamp:

02/04/2016 05:51:37 PM (9 years ago)

Author:

stephdau

Message:

WPORG SSO: filtering the lost password URL to make sure to always point to our custom route/template.

See #1524

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (3 diffs)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -17 +17 @@
          */
         public $valid_sso_paths = array(
-            '/',
-            '/checkemail',
-            '/loggedout',
-            '/lostpassword',
-            '/oauth',
+            'root'         => '/',
+            'checkemail'   => '/checkemail',
+            'loggedout'    => '/loggedout',
+            'lostpassword' => '/lostpassword',
+            'oauth'        => '/oauth',
         );
         
@@ -54 +54 @@
             // Add our host to the list of allowed ones.
             add_filter( 'allowed_redirect_hosts', array( &$this, 'add_allowed_redirect_host' ) );
+            
+            // Replace the lost password URL by our own
+            add_filter( 'lostpassword_url', array( &$this, 'lostpassword_url' ), 10, 2 );
             
             if ( preg_match( '!/wp-signup\.php$!', $this->script ) ) {
@@ -167 +170 @@
         
         /**
+         * Filters the default lost password URL and returns our custom one instead.
+         * 
+         * @param string $lostpassword_url
+         * @param string $redirect
+         */
+        public function lostpassword_url( $lostpassword_url, $redirect ) {
+            return home_url( $this->valid_sso_paths['lostpassword'] . '/?redirect_to=' . $redirect );
+        }
+        
+        /**
          * Redirects the user to her/his (support) profile.
          */