From dbd029d8cfa234b4704bd9f9bb104ec28b0828e0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antoine=20Beaupr=EF=BF=BD=EF=BF=BD?=
 <anarcat@anarcat.ath.cx>
Date: Tue, 17 Jun 2014 20:57:26 +0000
Subject: [PATCH] warn users to switch to HTTPS if it's not enable, admins can
 opt out through a variable

---
 bureau/admin/index.php | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/bureau/admin/index.php b/bureau/admin/index.php
index a028342b..9f0995a5 100644
--- a/bureau/admin/index.php
+++ b/bureau/admin/index.php
@@ -74,12 +74,9 @@ if ( empty($logo) ||  ! $logo ) {
     <br/>
     <?php
     if (isset($_GET['authip_token'])) $authip_token=$_GET['authip_token'];
-    /*
-    if (!$_SERVER[HTTPS]) {
-      echo "<h4>ATTENTION : vous allez acc�der � votre panel en mode *non s�curis�*<br/>
-    <a href=\"https://".$_SERVER["HTTP_HOST"]."/\">Cliquez ici pour passer en mode s�curis�</a></h4>"; 
+    if (variable_get('https_warning', true, 'warn users to switch to HTTPS') && !isset($_SERVER['HTTPS'])) {
+      echo __('<h4>WARNING: you are trying to access the control panel insecurely, click <a href="%s">here</a> to go to secure mode</h4>', $_SERVER["HTTP_HOST"]);
     }
-    */
     ?>
     <div style="margin: 0 auto 30px auto; width: 700px;">
       <table width="100%"><tr><td>