Skip to content

Conversation

@cs1m0n
Copy link
Member

@cs1m0n cs1m0n commented Jan 13, 2026

@cs1m0n cs1m0n requested a review from rvanoord January 13, 2026 14:40
@cs1m0n cs1m0n self-assigned this Jan 13, 2026
setcookie($cookie_name, $token, $exp, '/', '', $secure, true);
}

wp_safe_redirect();
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing redirect URL

}

// 2) If token is present in URL, verify it, set cookie, then redirect to clean URL
$token = isset($_GET['bcc_token']) ? sanitize_text_field(wp_unslash($_GET['bcc_token'])) : '';
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rename bcc_token to avoid confusion with bcc auth or identity token.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants