Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

SSL behind load balancer

#1367

It seems that exponent-cms doesn't recognize when a user accesses the site through a load balancer that does SSL termination.

This file:
exponent-cms/exponent_constants.php

This code:

/** * URL_BASE Constant * * The URL_BASE constant is the base URL of the domain hosting the Exponent site. * It does not include the PATH_RELATIVE information. The automatic * detection code can figure out if the server is running in SSL mode or not */ if (!defined('URL_BASE')) {
define('URL_BASE', ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 'https://' : 'http://') . HOSTNAME); }

Should make another server check:

$_SERVER['HTTP_X_FORWARDED_PROTO'] should return http or https

Reported by Gene Redinger · June 6th, 2016 @ 07:11 PM

State: resolved
Milestone: 2.3.9
Assigned to: dleffler dleffler

Activity

  1. expNinja
    expNinja
    • State changed from new to resolved

    (from [4e8165c6c3dbf9938c9bfe6c67dfabbbd98dc6c6]) update URL_BASE constant to account for ssl load balancer [#1367 state:resolved] https://github.com/exponentcms/exponent-cms/commit/4e8165c6c3dbf993...

    June 7th, 2016 @ 03:00 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.