#1367 ✓resolved
Gene Redinger

SSL behind load balancer

Reported by Gene Redinger | June 6th, 2016 @ 07:11 PM | in 2.3.9 (closed)

It seems that exponent-cms doesn't recognize when a user accesses the site through a load balancer that does SSL termination.

This file:
exponent-cms/exponent_constants.php

This code:

/** * URL_BASE Constant * * The URL_BASE constant is the base URL of the domain hosting the Exponent site. * It does not include the PATH_RELATIVE information. The automatic * detection code can figure out if the server is running in SSL mode or not */ if (!defined('URL_BASE')) {
define('URL_BASE', ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 'https://' : 'http://') . HOSTNAME); }

Should make another server check:

$_SERVER['HTTP_X_FORWARDED_PROTO'] should return http or https

Comments and changes to this ticket

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Bug Tracker for Exponent CMS

Shared Ticket Bins

People watching this ticket

Pages