prehistoric-systems/mytinytodo
1
0
Fork 0
mirror of https://github.com/maxpozdeev/mytinytodo.git synced 2026-03-11 08:55:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

* check X-Forwarded-Proto for https

Browse source 
(cherry picked from commit 778a4e5fa8)
This commit is contained in:
maxpozdeev 2023-08-06 17:05:25 +03:00
parent f19573221a
commit 3e5252e931
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
src/init.php
View file

@ -409,12 +409,13 @@ function is_https(): bool
if (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') {
return true;
}
/*
TODO: Check for X-Forwarded-Proto==https or X-Forwarded-For==https ?
*/
if (defined('MTT_USE_HTTPS') && MTT_USE_HTTPS) {
return true;
}
// This HTTP header can be overriden by user agent!
if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) == 'https') {
return true;
}
return false;
}