From 1ef21c95af1444cb1810f49c3b8a5bcfe4294ac3 Mon Sep 17 00:00:00 2001 From: Thomas Rupprecht Date: Mon, 14 Nov 2016 22:36:22 +0100 Subject: [PATCH] #446 implement force https redirect --- adm_program/system/common.php | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/adm_program/system/common.php b/adm_program/system/common.php index 0cfce244d2..87a6d757e9 100644 --- a/adm_program/system/common.php +++ b/adm_program/system/common.php @@ -46,6 +46,17 @@ // LOGGING require_once(ADMIDIO_PATH . '/adm_program/system/logging.php'); +// Force permanent HTTPS redirect +if (isset($gForceHTTPS) && $gForceHTTPS && !HTTPS) +{ + $url = str_replace('http://', 'https://', CURRENT_URL); + + $gLogger->notice('REDIRECT: Redirecting permanent to HTTPS!', array('url' => $url, 'statusCode' => 301)); + + header('Location: ' . $url, true, 301); + exit(); +} + // remove HTML & PHP-Code from all parameters $_GET = admStrStripTagsSpecial($_GET); $_POST = admStrStripTagsSpecial($_POST);