Actions
Bug #58372
closedTYPO3_SSL check with reverseProxySSL
Status:
Closed
Priority:
Must have
Assignee:
-
Category:
-
Target version:
-
Start date:
2014-04-30
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.5
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:
Description
Function getIndpEnv on t3lib/class.t3lib_div.php checks if the session uses https.
If you are behind a SSL Proxy, it compares getIndpEnv('REMOTE_ADDR') with the proxy IP, but getIndpEnv('REMOTE_ADDR') is the client IP, so it has no sense.
It must compare $_SERVER['REMOTE_ADDR'] with proxy IP (as it does finding proxy prefix).
Proposal fix attached as patch file.
Files
Actions