From 0f00cf8f49b185d52a3283ab932b6d90b25202ba Mon Sep 17 00:00:00 2001
From: Timothy Allen <tim@treehouse.org.za>
Date: Fri, 25 Sep 2026 21:45:19 +0200
Subject: [PATCH] Stop the page after each HTTPS redirect.

---
 publish/addeditor.php | 1 +
 publish/edit.php      | 1 +
 publish/login.php     | 1 +
 publish/logout.php    | 1 +
 4 files changed, 4 insertions(+)

diff --git a/publish/addeditor.php b/publish/addeditor.php
index 442354d..fe9423c 100644
--- a/publish/addeditor.php
+++ b/publish/addeditor.php
@@ -1,6 +1,7 @@
 <?php 
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php"); 
 $added = FALSE;
diff --git a/publish/edit.php b/publish/edit.php
index a610714..61f0d76 100644
--- a/publish/edit.php
+++ b/publish/edit.php
@@ -1,6 +1,7 @@
 <?php
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php"); 
 if (!isset($_SESSION['editor'])) {
diff --git a/publish/login.php b/publish/login.php
index cff68e9..fddc585 100644
--- a/publish/login.php
+++ b/publish/login.php
@@ -1,6 +1,7 @@
 <?php
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 require_once("../session.lib.php");
 $denied = NULL;
diff --git a/publish/logout.php b/publish/logout.php
index 9aeb20a..8e176e7 100644
--- a/publish/logout.php
+++ b/publish/logout.php
@@ -6,6 +6,7 @@ header( 'Pragma: no-cache' );
 include_once('../session.lib.php');
 if ( ! isset($_SERVER['HTTPS'])) {
    header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+   exit;
 }
 // Only log out from our own logout link, which carries the CSRF token
 if (!csrf_valid($_GET['token'] ?? '')) {