cuqmbr/single_php_filehost
1
0
Fork 0
mirror of https://github.com/Rouji/single_php_filehost.git synced 2025-04-04 16:39:34 +00:00
Code

add FORCE_HTTPS config option

Browse Source 
$_SERVER['HTTPS'] is "the" automagic way of handling this, and *does*
work behind reverse proxies and stuff, but can admittedly be a pain to
configure correctly.

Handling X-Forwarded-Proto and friends in code instead of the webserver
config is a can of worms too (spoofing concerns), so I'm not gonna touch
that and add this explicit override instead.

part of #29
This commit is contained in:
Andreas Hackl 2024-06-08 16:04:39 +02:00
parent 027b150798
commit eca6db53b7
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
index.php
View File

@ -16,11 +16,13 @@ class CONFIG
const EXTERNAL_HOOK = null; //external program to call for each upload
const AUTO_FILE_EXT = false; //automatically try to detect file extension for files that have none
const FORCE_HTTPS = false; //force generated links to be https://
const ADMIN_EMAIL = 'admin@example.com'; //address for inquiries
public static function SITE_URL() : string
{
$proto = ($_SERVER['HTTPS'] ?? 'off') == 'on' ? 'https' : 'http';
$proto = ($_SERVER['HTTPS'] ?? 'off') == 'on' || CONFIG::FORCE_HTTPS ? 'https' : 'http';
return "$proto://{$_SERVER['HTTP_HOST']}{$_SERVER['REQUEST_URI']}";
}
};