Fixes issue #457: incorrect HTTPS detection.

12 years ago · 66e698673d
2 changed files with 3 additions and 3 deletions
--- a/framework/yii/web/Request.php
+++ b/framework/yii/web/Request.php
@ -533,8 +533,8 @@ class Request extends \yii\base\Request
 	 */
 	public function getIsSecureConnection()
 	{
-		return isset($_SERVER['HTTPS']) && strcasecmp($_SERVER['HTTPS'], 'off')
-			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO']==='https';
+		return isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] === 'on' || $_SERVER['HTTPS'] == 1)
+			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https';
 	}

 	/**