detect HTTPS from proxies

Signed-off-by: Arthur Schiwon <[email protected]>
CollaboraOnline · Sep 8, 2020 · f835f33 · f835f33
1 parent 2853189
commit f835f33
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/proxy.php b/proxy.php
@@ -237,7 +237,10 @@ function getallheaders()
     exit();
 }
 // URL into this server of the proxy script.
-if (isset($_SERVER['HTTPS'])) {
+if ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
+	|| (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' )
+	|| (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] === 'on')
+) {
     $proxyURL = "https://";
 } else {
     $proxyURL = "http://";