If this configuration parameter is set to true when receiving an insecure HTTP request, it will always redirect to HTTPS. This overrides and disables the preferhttps user preference, and it overrides $wgSecureLogin .
$wgServer may be either https or protocol-relative. If $wgServer starts with "http://", an exception will be thrown.
If a reverse proxy or CDN is used to forward requests from HTTPS to HTTP, the request header "X-Forwarded-Proto: https" should be sent to suppress the redirect.
In addition to setting this to true, for optimal security, the webserver should also be configured to send HTTP Strict Transport Security (HSTS) response headers.
When $wgForceHTTPS is set to false, HTTP/HTTPS preference is tracked on a per-user basis, by a combination of:
prefershttps user preferenceforceHTTPS and session metadata (available via Session::shouldForceHTTPS())
Session::setForceHTTPS()This variable was added in MediaWiki 1.35.0 (gerrit:608504). It was back-ported to 1.34 as part of the MediaWiki 1.34.3 release (gerrit:612497) as well as to 1.31 as part of the MediaWiki 1.31.9 release (gerrit:615840).
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4