tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Stop the page after each HTTPS redirect.

Browse Source
This commit is contained in:
tim
2026-09-25 21:45:19 +02:00
parent 1541ab8411
commit 0f00cf8f49
4 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
publish/addeditor.php
+1
View File
@@ -1,6 +1,7 @@
<?php <?php
if ( ! isset($_SERVER['HTTPS'])) { if ( ! isset($_SERVER['HTTPS'])) {
header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']); header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
exit;
} }
require_once("../session.lib.php"); require_once("../session.lib.php");
$added = FALSE; $added = FALSE;
publish/edit.php
+1
View File
@@ -1,6 +1,7 @@
<?php <?php
if ( ! isset($_SERVER['HTTPS'])) { if ( ! isset($_SERVER['HTTPS'])) {
header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']); header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
exit;
} }
require_once("../session.lib.php"); require_once("../session.lib.php");
if (!isset($_SESSION['editor'])) { if (!isset($_SESSION['editor'])) {
publish/login.php
+1
View File
@@ -1,6 +1,7 @@
<?php <?php
if ( ! isset($_SERVER['HTTPS'])) { if ( ! isset($_SERVER['HTTPS'])) {
header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']); header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
exit;
} }
require_once("../session.lib.php"); require_once("../session.lib.php");
$denied = NULL; $denied = NULL;
publish/logout.php
+1
View File
@@ -6,6 +6,7 @@ header( 'Pragma: no-cache' );
include_once('../session.lib.php'); include_once('../session.lib.php');
if ( ! isset($_SERVER['HTTPS'])) { if ( ! isset($_SERVER['HTTPS'])) {
header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']); header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
exit;
} }
// Only log out from our own logout link, which carries the CSRF token // Only log out from our own logout link, which carries the CSRF token
if (!csrf_valid($_GET['token'] ?? '')) { if (!csrf_valid($_GET['token'] ?? '')) {