View Issue Detail

ID	Project	Category	Submitted / Last Updated
01456	UserSpice	ACP Code	2022-01-18 21:49:31 / 2024-01-02 13:25:57
Reported	Dan Hoover	Assigned To	Unassigned
Priority	none	Reported	5.4.0
Status	closed	Resolution Version and Commit
Summary	Force SSL breaks POST with clean urls on non-https connections
Description	Need a more graceful fail. Or a harder fail so people know what's going on. This redirect should not happen on localhost if ($settings->force_ssl==1){ if(!isset($_SERVER['HTTP_HOST'])){ die("HTTP_HOST must be set due to force https rule"); } if (!isset($_SERVER['HTTPS']) \|\| !$_SERVER['HTTPS']) { // if request is not secure, redirect to secure url $url = 'https://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']; Redirect::to($url); exit; } }