HTTP redirect status code must be a redirection code, 3xx.

[aitor-alvarez]

Hi there,

I am getting the above mentioned error when the option "hide WP logins" is selected.

This option can be found under "advanced settings" (see the image below).
Before today, when this option was checked, it would redirect automatically to the CAS url when visiting /wp-login.php Now, after the last update (Version: 3.10.1), the "HTTP redirect status code must be a redirection code, 3xx." error appears if this option is enabled.

Thanks

[WorksAtAUni]

Seeing same... multiple sites, CAS shop.

[greg-randall]

I put in a pull request with a fix.

[figureone]

Thanks all for the detailed report, and thanks @greg-randall for the super helpful pull request.

Major apologies to you all for not catching this one before release; it was a single darn parenthesis in the wrong place (causing the CAS ID param to be set as the redirect code, instead of the id param in the redirect URL).

Version 3.10.2 is out now with the fix, please let us know if anyone is still encountering problems.

[BLLuten]

This one caught me. /wp-login.php?external=wordpress along with my password manager to the rescue.

[figureone]

Ugh yeah, sorry! Also remember you can use the password reset email if you happen to not know your WordPress user password. (Unless you have Authorizer configured to disable WordPress logins completely! Then you're stuck with editing the database to turn that flag off, or disable Authorizer.)