creative-coder

I found a secure issue, in index.php line 35 'http://' . Environment::get('HTTP_HOST') better would be 'http://' . Environment::get('SERVER_NAME') to prevent host header attack http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html