Menu

#42 Cookie Detection Under SSL

open
nobody
None
5
2009-10-23
2009-10-23
No

The redirect URL when detecting cookies in 2.1.4 is hard-coded to use http. If you want to use SSL, it won't work. It drops out to the http equivalent from a starting https URL. I inserted a detection before line 793 and modified the old line 793 to use the result:

$protocol = getenv('HTTPS') == 'on' ? 'https':'http';
$location=$protocol.'://'.getenv('SERVER_NAME').$script_path.($QS==''?'':'?'.$QS);

Any reason not to do this?

Discussion


Log in to post a comment.

MongoDB Logo MongoDB