appadmin_manage_without_https, thanks Anthony

2013-07-25 05:04:35 -05:00
parent 182b385734
commit 8b7a638e9f
4 changed files with 7 additions and 4 deletions
@@ -32,7 +32,8 @@ except:

 if request.env.http_x_forwarded_for or request.is_https:
    session.secure()
-elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1"):
+elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
+    (request.function != 'manage'):
    raise HTTP(200, T('appadmin is disabled because insecure channel'))

 if request.function == 'manage':