Better HTTPS detection when running behind a reverse proxy

This commit is contained in:
Werner Fleck 2021-04-15 22:41:28 +02:00
parent b7c5ced470
commit 71d3811da6

View file

@ -67,7 +67,9 @@ define('FILENAME', 'index.txt');
// Domain and protocol
define('DOMAIN', $_SERVER['HTTP_HOST']);
if (!empty($_SERVER['HTTPS'])) {
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on'
|| !empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https'
|| !empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on') {
define('PROTOCOL', 'https://');
} else {
define('PROTOCOL', 'http://');