{"action":"created","issue":{"url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/5","labels_url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/5/comments","events_url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/5/events","html_url":"https://github.com/pancakeapp/pancake-payments-issues/issues/5","id":103132522,"number":5,"title":"HTTPS Issue","user":{"login":"roballport","id":1782734,"avatar_url":"https://avatars.githubusercontent.com/u/1782734?v=3","gravatar_id":"","url":"https://api.github.com/users/roballport","html_url":"https://github.com/roballport","followers_url":"https://api.github.com/users/roballport/followers","following_url":"https://api.github.com/users/roballport/following{/other_user}","gists_url":"https://api.github.com/users/roballport/gists{/gist_id}","starred_url":"https://api.github.com/users/roballport/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/roballport/subscriptions","organizations_url":"https://api.github.com/users/roballport/orgs","repos_url":"https://api.github.com/users/roballport/repos","events_url":"https://api.github.com/users/roballport/events{/privacy}","received_events_url":"https://api.github.com/users/roballport/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-08-25T22:42:48Z","updated_at":"2015-08-27T21:49:17Z","closed_at":null,"body":"I have an install of Pancake running over HTTPS. \r\n\r\nIn //system/pancake/helpers/pancake_helper.php there is a \"get_gravatar()\" function. This function checks for the presence of the \"HTTPS\" key within $_SERVER.\r\n\r\nNot all servers set this or use it to determine HTTPS. For instance, my current hosts uses $_SERVER[\"HTTP_X_FORWARDED_PROTO\"]. After every update I have to manually edit line #1212 to:\r\n\r\n`$url = 'https://gravatar.com/avatar/';`\r\n\r\nIf I don't do this, Chrome displays HTTPS errors in the address bar and ultimately gives warnings to clients who view invoices online, as the page contains insecure content.  \r\n\r\nIs it possible to either always load the gravatar via HTTPS or check for the presence of \"HTTP_X_FORWARDED_PROTO\" too?"},"comment":{"url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/comments/135565330","html_url":"https://github.com/pancakeapp/pancake-payments-issues/issues/5#issuecomment-135565330","issue_url":"https://api.github.com/repos/pancakeapp/pancake-payments-issues/issues/5","id":135565330,"user":{"login":"BrunoDeBarros","id":5393,"avatar_url":"https://avatars.githubusercontent.com/u/5393?v=3","gravatar_id":"","url":"https://api.github.com/users/BrunoDeBarros","html_url":"https://github.com/BrunoDeBarros","followers_url":"https://api.github.com/users/BrunoDeBarros/followers","following_url":"https://api.github.com/users/BrunoDeBarros/following{/other_user}","gists_url":"https://api.github.com/users/BrunoDeBarros/gists{/gist_id}","starred_url":"https://api.github.com/users/BrunoDeBarros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BrunoDeBarros/subscriptions","organizations_url":"https://api.github.com/users/BrunoDeBarros/orgs","repos_url":"https://api.github.com/users/BrunoDeBarros/repos","events_url":"https://api.github.com/users/BrunoDeBarros/events{/privacy}","received_events_url":"https://api.github.com/users/BrunoDeBarros/received_events","type":"User","site_admin":false},"created_at":"2015-08-27T21:49:17Z","updated_at":"2015-08-27T21:49:17Z","body":"Hey @roballport, thanks for reporting that! Pancake has a constant, `IS_SSL `, which does take into account `HTTP_X_FORWARDED_PROTO`. get_gravatar() should've been using it, but it was built before `IS_SSL` was available. This has been added to Pancake 4.8.29, which'll be released as soon as possible (ideally later today)."}}