diff --git a/publish/addeditor.php b/publish/addeditor.php
index 442354d..fe9423c 100644
--- a/publish/addeditor.php
+++ b/publish/addeditor.php
@@ -1,6 +1,7 @@
 <?php 
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php"); 
 $added = FALSE;
diff --git a/publish/edit.php b/publish/edit.php
index a610714..61f0d76 100644
--- a/publish/edit.php
+++ b/publish/edit.php
@@ -1,6 +1,7 @@
 <?php
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php"); 
 if (!isset($_SESSION['editor'])) {
diff --git a/publish/login.php b/publish/login.php
index cff68e9..fddc585 100644
--- a/publish/login.php
+++ b/publish/login.php
@@ -1,6 +1,7 @@
 <?php
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php");
 $denied = NULL;
diff --git a/publish/logout.php b/publish/logout.php
index 9aeb20a..8e176e7 100644
--- a/publish/logout.php
+++ b/publish/logout.php
@@ -6,6 +6,7 @@ header( 'Pragma: no-cache' );
 include_once('../session.lib.php');
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 // Only log out from our own logout link, which carries the CSRF token
 if (!csrf_valid($_GET['token'] ?? '')) {