Title: Redirection blocked
Last modified: August 31, 2016

---

# Redirection blocked

 *  Resolved [madvic](https://wordpress.org/support/users/madvic/)
 * (@madvic)
 * [10 years, 3 months ago](https://wordpress.org/support/topic/redirection-blocked/)
 * Hello,
    On my website the url : `http://test.mysite.org/wp/login/?redirect_to
   =http://test.mysite.org/wp/wp-admin/` was blocked by this plugin. This URL is
   ok : `http://test.mysite.org/wp/login/` Why blocked this and how correct it on
   my website ? Thanks
 * [https://wordpress.org/plugins/block-bad-queries/](https://wordpress.org/plugins/block-bad-queries/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Jeff Starr](https://wordpress.org/support/users/specialk/)
 * (@specialk)
 * [10 years, 3 months ago](https://wordpress.org/support/topic/redirection-blocked/#post-7164083)
 * Hi, yes that is a bug that will be fixed in the next update. If you want to contact
   me directly, I can send a simple whitelist plugin that will resolve the issue
   in the current version. To get it, reach me via my contact form: [https://perishablepress.com/contact/](https://perishablepress.com/contact/)
 *  Plugin Author [Jeff Starr](https://wordpress.org/support/users/specialk/)
 * (@specialk)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/redirection-blocked/#post-7164326)
 * This issue is resolved in the latest version of BBQ, v20160328. Thanks for reporting.
 * **Explanation**
 * It turns out that certain WordPress functions such as `wp_lostpassword_url()`
   fail to encode URLs properly. Specifically, this function and possibly others
   include reserved characters, `:` (colon) and `/` (forward slash), in the query
   string, for example:
 * `http://example.com/wp-login.php?action=lostpassword&redirect_to=http://example.
   com/`
 * Because of this, security plugins and firewalls no longer can block a wide range
   of malicious requests without also interfering with WP’s unencoded URLs.
 * Thus the pattern `\:\/\/` was removed in BBQ version 20160328.
 * [Learn more about encoding characters in URLs](https://perishablepress.com/stop-using-unsafe-characters-in-urls/)
 *  Thread Starter [madvic](https://wordpress.org/support/users/madvic/)
 * (@madvic)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/redirection-blocked/#post-7164327)
 * Thanks a lot

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Redirection blocked’ is closed to new replies.

 * ![](https://ps.w.org/block-bad-queries/assets/icon-256x256.png?rev=1471770)
 * [BBQ Firewall - Fast & Powerful Firewall Security](https://wordpress.org/plugins/block-bad-queries/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/block-bad-queries/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/block-bad-queries/)
 * [Active Topics](https://wordpress.org/support/plugin/block-bad-queries/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/block-bad-queries/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/block-bad-queries/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [madvic](https://wordpress.org/support/users/madvic/)
 * Last activity: [10 years, 2 months ago](https://wordpress.org/support/topic/redirection-blocked/#post-7164327)
 * Status: resolved