#446 implement force https redirect

Admidio · Nov 14, 2016 · 1ef21c9 · 1ef21c9
1 parent 1e09dce
commit 1ef21c9
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/adm_program/system/common.php b/adm_program/system/common.php
@@ -46,6 +46,17 @@
 // LOGGING
 require_once(ADMIDIO_PATH . '/adm_program/system/logging.php');
 
+// Force permanent HTTPS redirect
+if (isset($gForceHTTPS) && $gForceHTTPS && !HTTPS)
+{
+    $url = str_replace('http://', 'https://', CURRENT_URL);
+
+    $gLogger->notice('REDIRECT: Redirecting permanent to HTTPS!', array('url' => $url, 'statusCode' => 301));
+
+    header('Location: ' . $url, true, 301);
+    exit();
+}
+
 // remove HTML & PHP-Code from all parameters
 $_GET    = admStrStripTagsSpecial($_GET);
 $_POST   = admStrStripTagsSpecial($_POST);