Fixes issue #457: incorrect HTTPS detection.

12 years ago · 66e698673d
2 changed files with 3 additions and 3 deletions
--- a/framework/yii/web/Request.php
+++ b/framework/yii/web/Request.php
@ -533,7 +533,7 @@ class Request extends \yii\base\Request
 	 */
 	public function getIsSecureConnection()
 	{
-		return isset($_SERVER['HTTPS']) && strcasecmp($_SERVER['HTTPS'], 'off')
+		return isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] === 'on' || $_SERVER['HTTPS'] == 1)
 			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https';
 	}