phpmyadmin_heroku icon indicating copy to clipboard operation
phpmyadmin_heroku copied to clipboard

Force HTTPS connection with Apache redirect

Open callawaywilson opened this issue 5 years ago • 0 comments

The ForceSSL configuration element has been deprecated on phpMyAdmin https://docs.phpmyadmin.net/en/latest/config.html#cfg_ForceSSL, so the default deployment of this app allows plaintext connections to the Heroku app.

This Apache configuration adds an HTTP to HTTPS redirect. There's probably no reason to access phpMyAdmin over HTTP at Heroku, so this seems like a more secure default. If someone wants to remove the redirect, they can remove the custom configuration from the Procfile

callawaywilson avatar Dec 14 '20 22:12 callawaywilson