diff --git a/includes/session_check.php b/includes/session_check.php index 930c516..8945ff5 100644 --- a/includes/session_check.php +++ b/includes/session_check.php @@ -24,8 +24,10 @@ function checkSession(): void validateSessionDomain(); if (!isset($_SESSION['user_id'])) { - $scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http'; - $host = $_SERVER['HTTP_HOST'] ?? 'localhost'; + $appUrl = $_ENV['APP_URL'] ?? getenv('APP_URL') ?? ''; + $parsed = parse_url($appUrl); + $scheme = $parsed['scheme'] ?? 'https'; + $host = $parsed['host'] ?? $_SERVER['HTTP_HOST'] ?? 'localhost'; header('Location: ' . $scheme . '://' . $host . '/login.php'); exit; }