HttpsPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');
 
class HttpsPolicy extends AuthorizationPolicy {
   var $_request;
 
   function __construct($request) {
      parent::__construct();
      $this->_request = $request;
 
      // Add advice
      $callOnDeny = array($request, 'redirectSSL', array());
      $this->setAdvice(AUTHORIZATION_ADVICE_CALL_ON_DENY, $callOnDeny);
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function applies() {
      return (boolean)Config::getVar('security', 'force_ssl');
   }
 
   function effect() {
      // Check the request protocol
      if ($this->_request->getProtocol() == 'https') {
         return AUTHORIZATION_PERMIT;
      } else {
         return AUTHORIZATION_DENY;
      }
   }
}