fixed getSecureConnection after #1800

and 7ba6a06300
11 years ago · 9968098e8a
1 changed files with 1 additions and 1 deletions
--- a/framework/yii/web/Request.php
+++ b/framework/yii/web/Request.php
@ -669,7 +669,7 @@ class Request extends \yii\base\Request
 	public function getIsSecureConnection()
 	{
 		return isset($_SERVER['HTTPS']) && (strcasecmp($_SERVER['HTTPS'], 'on') === 0 || $_SERVER['HTTPS'] == 1)
-			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strcasecmp($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https');
+			|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strcasecmp($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') === 0;
 	}

 	/**