Redirecting to URL parameter

Here’s a more specific example of a URL I’m trying to redirect.
Not sure how to specify the RedirectUrl parameter’s value as my redirect url.

https://mysite.com/logged-in/?UserId=ba7f125e-8b5a-40e8-8944-fcaa81d8f200&sso=96b20366-ecfa-40c5-908b-9fae844d5ced&Action=Login&RedirectUrl=http%3a%2f%2fmyothersite.com%2faccount%2flogin.aspx

Thanks

• This reply was modified 5 years, 11 months ago by Aakash.

That’s not something I would advise doing. You will create an open redirect, allowing anyone to use your site as described below:

https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md
https://affinity-it-security.com/what-is-an-open-redirect/

Thanks for pointing out that security concern John, appreciate it.
Is there a recommended way to validate the redirect url and do this with the plugin. Or does this call for a custom solution?

You can restrict the values of the URL parameters using regular expressions, but it will be difficult to “make sense” of them without more code.

Basically, the “logged-in” page should have code that examines $_GET or $_REQUEST and determines what to do next, and then uses wp_redirect to send the visitor to the right place.

Yeah, it really depends on your situation. Re-reading your original message you only give one RedirectUri so it’s hard to know. If there are a small number of targets you could create individual redirects for each, or use a regular expression as Gal suggests.

If there are many targets, or targets that don’t match a pattern, then you’d be better with some code. You could use a ‘URL and custom filter’ redirect in Redirection to handle this.