From 8454d918e8d1d45d764a92af90b89651300aaed6 Mon Sep 17 00:00:00 2001
From: Matt Pass <matt@mattpass.com>
Date: Wed, 17 Sep 2014 14:18:28 +0100
Subject: [PATCH] Warn if using over non https connection

---
 lib/login.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/login.php b/lib/login.php
index 6021901..8c9256d 100644
--- a/lib/login.php
+++ b/lib/login.php
@@ -30,6 +30,9 @@ echo $ICEcoder["password"] == "" && !$ICEcoder["multiUser"] ? "Setup" : "Login";
 		<input type="password" name="password" class="password"><br><br>
 		<input type="submit" name="submit" value="<?php if ($ICEcoder["multiUser"] && $ICEcoderSettings["enableRegistration"]) {echo $t['set password']." / ".$t['login'];} else {echo $ICEcoder["password"] == "" ? $t['set password'] : $t['login'];}; ?>" class="button">
 		<?php
+			if(empty($_SERVER['HTTPS'])) {
+				echo '<div class="text">Using over non-https connection.<br>SSL is recommended!</div>';
+			}
 			if($ICEcoder["multiUser"] && $ICEcoderSettings["enableRegistration"]){
 				echo '<div class="text"><a href="javascript:alert(\''.$t['To disable registration...'].'\')">'.$t['Registration mode enabled'].'</a></div>';
 			}