From 37a2df870d5237ace3ae60851c4cb7101159e1bf Mon Sep 17 00:00:00 2001
From: champsupertramp <heychampsupertramp@gmail.com>
Date: Thu, 21 Apr 2016 11:19:06 +0800
Subject: [PATCH] Fix redirect url

---
 core/um-actions-access.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/core/um-actions-access.php b/core/um-actions-access.php
index 5acafe5e..f616ec48 100644
--- a/core/um-actions-access.php
+++ b/core/um-actions-access.php
@@ -195,7 +195,7 @@
 			case 1:
 
 				if ( is_user_logged_in() )
-					$redirect_to = $access_redirect2;
+					$redirect_to = esc_url( $access_redirect2 );
 
 				if ( !is_user_logged_in() )
 					$ultimatemember->access->allow_access = true;
@@ -206,7 +206,7 @@
 
 				if ( !is_user_logged_in() ){
 					if ( !$access_redirect ) $access_redirect = um_get_core_page('login');
-					$redirect_to = $access_redirect;
+					$redirect_to = esc_url( $access_redirect );
 				}
 
 				if ( is_user_logged_in() && isset( $access_roles ) && !empty( $access_roles ) ){
@@ -216,12 +216,12 @@
 					if ( !empty( $access_roles ) && !in_array( um_user('role'), $access_roles ) ) {
 						if ( !$access_redirect ) {
 							if ( is_user_logged_in() ) {
-								$access_redirect = site_url();
+								$access_redirect = esc_url( site_url() );
 							} else {
-								$access_redirect = um_get_core_page('login');
+								$access_redirect = esc_url( um_get_core_page('login') );
 							}
 						}
-						$redirect_to = $access_redirect;
+						$redirect_to = esc_url( $access_redirect );
 					}
 				}
 
@@ -234,7 +234,7 @@
 
 			} else {
 				$ultimatemember->access->allow_access = false;
-				$ultimatemember->access->redirect_handler = $redirect_to;
+				$ultimatemember->access->redirect_handler = esc_url( $redirect_to );
 			}
 		}