$https variable?

locojohn nginx-forum at nginx.us
Wed Sep 28 11:25:58 UTC 2011


Unfortunately, PHP code in many known packages (such as Moodle)
sometimes relies on the wrong assumption:

$HTTPS = isset($HTTP_SERVER_VARS['HTTPS']) ? $HTTP_SERVER_VARS['HTTPS']
: 'off';

Because in Apache HTTPS variable is never submitted at all in http mode
and coders believe this is enough information to check.  So, is there a
way to never submit HTTPS=off at all if HTTPS is not present?

Andrejs

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,215756,215941#msg-215941



More information about the nginx mailing list