Merge pull request #485 from ProgressPlanner/filip/v15/redirect-check

Don't redirect user to Progress Planner dashboard if 'redirect_to' GET or POST parameter is set

Author: aristath

CHANGELOG.md

@@ -1,3 +1,9 @@
+= 1.5.0 =
+
+Bugs we fixed:
+
+* Don't redirect user to Progress Planner dashboard if 'redirect_to' GET or POST parameter is set.
+
 = 1.4.2 =
 
 Bugs we fixed:

classes/class-base.php

@@ -465,6 +465,10 @@ public function redirect_on_login( $user_login, $user ) {
 			return;
 		}
 
+		if ( isset( $_REQUEST['redirect_to'] ) && '' !== $_REQUEST['redirect_to'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.NonceVerification.Missing -- We're not processing any data.
+			return;
+		}
+
 		// Redirect to the Progress Planner dashboard.
 		\wp_safe_redirect( \admin_url( 'admin.php?page=progress-planner' ) );
 		exit;