From e5a0063d80b47743ddc785177dc6d13b29b205b8 Mon Sep 17 00:00:00 2001
From: systopia <endres@systopia.de>
Date: Fri, 27 Mar 2015 13:21:15 +0100
Subject: [PATCH] require SSL

---
 proxy/proxy.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/proxy/proxy.php b/proxy/proxy.php
index dbd5b06..6468ac9 100644
--- a/proxy/proxy.php
+++ b/proxy/proxy.php
@@ -123,6 +123,11 @@ function civiproxy_mend_URLs(&$string) {
  * @return TRUE if allowed, FALSE if not (or quits if $quit is set)
  */
 function civiproxy_security_check($target, $quit=TRUE) {
+  // verify that we're SSL encrypted
+  if ($_SERVER['HTTPS'] != "on") {
+    civiproxy_http_error("This CiviProxy installation requires SSL encryption.", 400);
+  }  
+
   global $debug;
   if (!empty($debug)) {
     $file = fopen($debug, 'a');