define('GLOBAL_ENABLE_LABELS', false);
// Labels are a security risk, so this option can globally disable them for all users.
+ define('ENABLE_LOGIN_SSL', false);
+ // Redirect to SSL url for login
+
?>
session_destroy();
}
+ function get_script_urlpath() {
+ $request_uri = $_SERVER["REQUEST_URI"];
+ return preg_replace('/\/[^\/]+$/', "", $request_uri);
+ }
+
+ function get_login_redirect() {
+ $server = $_SERVER["SERVER_NAME"];
+
+ if (ENABLE_LOGIN_SSL) {
+ $protocol = "https";
+ } else {
+ $protocol = "http";
+ }
+
+ $url_path = get_script_urlpath();
+
+ $redirect_uri = "$protocol://$server$url_path/login.php";
+
+ return $redirect_uri;
+ }
+
function login_sequence($link) {
if (!SINGLE_USER_MODE) {
-
+
if (!USE_HTTP_AUTH) {
if (!$_SESSION["uid"]) {
- header("Location: login.php?rt=tt-rss.php");
+ $redirect_uri = get_login_redirect();
+ header("Location: $redirect_uri?rt=tt-rss.php");
exit;
}
} else {
require_once "config.php";
require_once "functions.php";
+ $url_path = get_script_urlpath();
+ $redirect_base = "http://" . $_SERVER["SERVER_NAME"] . $url_path;
+
if (SINGLE_USER_MODE) {
- header("Location: tt-rss.php");
+ header("Location: $redirect_base/tt-rss.php");
exit;
}
} else {
$redirect_to = "tt-rss.php";
}
- header("Location: $redirect_to");
+ header("Location: $redirect_base/$redirect_to");
}
}
logout_user();
if (!USE_HTTP_AUTH) {
- header("Location: login.php");
+ $url_path = get_script_urlpath();
+
+ if (ENABLE_LOGIN_SSL) {
+ $protocol = "https";
+ } else {
+ $protocol = "http";
+ }
+
+ $redirect_base = "$protocol://" . $_SERVER["SERVER_NAME"] . $url_path;
+
+ header("Location: $redirect_base/login.php");
} else { ?>
<html>
git.wh0rd.org / tt-rss.git / commitdiff
