<?php
// We always use SSL
if ($_SERVER['HTTP_X_FORWARDED_PROTO'] != 'https')
{
	header('Location: https://tribunal.phpfogapp.com/');
	die;
}

require 'partials.php';

// session expires in 30 minutes, only on our domain, only send session cookie over SSL
session_set_cookie_params(1800, '/', 'tribunal.phpfogapp.com', true);
session_start();

// if we don't know which case they're reviewing, they are not logged in
if (!isset($_SESSION['case']))
{
	require 'login.php';
}
else
{
	require 'review.php';
}

<?php
// We always use SSL
if ($_SERVER['HTTP_X_FORWARDED_PROTO'] != 'https')
{
	header('Location: https://tribunal.phpfogapp.com/?secure');
	die;
}

require 'partials.php';

// session expires in 30 minutes, only on our domain, only send session cookie over SSL
session_set_cookie_params(1800, '/', 'tribunal.phpfogapp.com', true);
session_start();

// if we don't know which case they're reviewing, they are not logged in
if (!isset($_SESSION['case']))
{
	require 'login.php';
}
else
{
	require 'review.php';
}

Add a "secure" query to the ssl redirect to possibly avoid being caught in the cache layer
Add a "secure" query to the ssl redirect to possibly avoid being caught in the cache layer
