Enhanced the detection of secure connection.

12 years ago · b2e7aa3114
1 changed files with 2 additions and 1 deletions
--- a/yii/web/Request.php
+++ b/yii/web/Request.php
@ -533,7 +533,8 @@ class Request extends \yii\base\Request
 	 */
 	public function getIsSecureConnection()
 	{
-		return !empty($_SERVER['HTTPS']) && strcasecmp($_SERVER['HTTPS'], 'off');
+		return isset($_SERVER['HTTPS']) && strcasecmp($_SERVER['HTTPS'], 'off')
+			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO']==='https';
 	}

 	/**