WordPress.org

1. ys2n
   Member
   Posted 1 month ago #

   I recently installed version 1.3 of the Wordpress plug-in in Wordpress MU 2.8.4a.

   I had one major problem which I hacked to overcome:

   When the plug-in redirected to the IDP it constructed target parameters that we "over-escaped". e.g.

   https://mysp.example.com/Shibboleth.sso/Login?target=https%253A%252F%252Fmysp.exaple.com%252Fwp-login.php%253Faction%253Dshibboleth

   Note that %253A is the %3A with the % escaped to %25.

   I fixed the problem by removing the urlencode from line 243 of shibboleth.php where it is constructing the initiator url:

   // $initiator_url = add_query_arg('target', urlencode($target), $initiator_url);
           $initiator_url = add_query_arg('target', $target, $initiator_url);

   Hope this helps,
   yuji
   ----

   http://wordpress.org/extend/plugins/shibboleth/

Reply

You must log in to post.