Improve tracking UX, archive editing, branding, and proxy-safe auth flow

2026-04-11 19:21:07 +02:00
parent 87f7859017
commit 4b95cc3dcb
2 changed files with 20 additions and 6 deletions
@@ -15,7 +15,13 @@ require __DIR__ . '/App.php';

 date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Berlin');

-$isSecure = !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off';
+$forwardedProto = strtolower((string) ($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? ''));
+$forwardedSsl = strtolower((string) ($_SERVER['HTTP_X_FORWARDED_SSL'] ?? ''));
+$isSecure = (
+    (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
+    || $forwardedProto === 'https'
+    || $forwardedSsl === 'on'
+);

 ini_set('session.use_only_cookies', '1');
 ini_set('session.use_strict_mode', '1');