Index: trunk/core/kernel/session/session.php =================================================================== diff -u -r2785 -r2819 --- trunk/core/kernel/session/session.php (.../session.php) (revision 2785) +++ trunk/core/kernel/session/session.php (.../session.php) (revision 2819) @@ -309,18 +309,19 @@ function IsHTTPSRedirect() { + $http_referer = getArrayValue($_SERVER, 'HTTP_REFERER'); return ( - (PROTOCOL == 'https://' && preg_match('#http:\/\/#', $_SERVER['HTTP_REFERER'])) - || - (PROTOCOL == 'http://' && preg_match('#https:\/\/#', $_SERVER['HTTP_REFERER'])) - ); + ( PROTOCOL == 'https://' && preg_match('#http:\/\/#', $http_referer) ) + || + ( PROTOCOL == 'http://' && preg_match('#https:\/\/#', $http_referer) ) + ); } function CheckReferer() { $path = preg_replace("/admin$/", '', $this->CookiePath); // removing /admin for compatability with in-portal (in-link/admin/add_link.php) $reg = '#^'.preg_quote(PROTOCOL.ltrim($this->CookieDomain, '.').$path).'#'; - return preg_match($reg, $_SERVER['HTTP_REFERER']) || (defined('IS_POPUP') && IS_POPUP); + return preg_match($reg, getArrayValue($_SERVER, 'HTTP_REFERER') ) || (defined('IS_POPUP') && IS_POPUP); } function CheckIfCookiesAreOn()