From e234ac8dcb2fa73bc573fea1e809ef45b3392ca7 Mon Sep 17 00:00:00 2001 From: Natan Frei Date: Mon, 17 Jul 2017 00:44:48 +0300 Subject: $_SERVER['HTTPS'] can be exists and 'off' for non-https connectios --- include/functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'include/functions.php') diff --git a/include/functions.php b/include/functions.php index ad6f2689c..ba5a699b9 100644 --- a/include/functions.php +++ b/include/functions.php @@ -1782,7 +1782,7 @@ } function is_server_https() { - return $_SERVER['HTTPS'] == 'on' || $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https'; + return (!empty($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] != 'off')) || $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https'; } function is_prefix_https() { -- cgit v1.2.3