[wp-trac] [WordPress Trac] #28443: SSL behind a load balancer

[WordPress Trac]

#28443: SSL behind a load balancer
--------------------------+-----------------------------
 Reporter:  lracicot      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Security      |    Version:  trunk
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 The 'is_ssl()' function does not support the X-Forwarded-Proto, which is
 the right way to verify if the request is https behind a load balancer.

 The solution suggested in the codex
 (http://codex.wordpress.org/Function_Reference/is_ssl) is to manually set
 the php server variable 'HTTPS', but this is not a good practice.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28443>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform