From 51320919fc2dec647607ef52f0f07bbec7370e9b Mon Sep 17 00:00:00 2001
From: hawk <hawk@octopuslabs.io>
Date: Sat, 5 Jan 2019 18:56:31 +0500
Subject: [PATCH] add warning on setup over http connection

---
 public/setup.php | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/public/setup.php b/public/setup.php
index d961195d..73df46f7 100644
--- a/public/setup.php
+++ b/public/setup.php
@@ -338,6 +338,15 @@ if ($error != 0) {
    <tr>
       <td colspan="3"><h3>Change setup password</h3></td>
    </tr>
+<?php
+   if (!isset($_SERVER['HTTPS'])) :
+?>
+   <tr>
+      <td colspan="3"><h4>Warning: connection not secure, switch to https if possible</h4></td>
+   </tr>
+<?php
+   endif;
+?>
    <tr>
       <td><label for="setup_password">Setup password</label></td>
       <td><input class="flat" type="password" name="setup_password" id="setup_password" value="" /></td>
@@ -370,6 +379,15 @@ if ($error != 0) {
     <tr>
       <td colspan="3"><h3>Create superadmin account</h3></td>
    </tr>
+<?php
+   if (!isset($_SERVER['HTTPS'])) :
+?>
+   <tr>
+      <td colspan="3"><h4>Warning: connection not secure, switch to https if possible</h4></td>
+   </tr>
+<?php
+   endif;
+?>
    <tr>
        <td><label for="setup_password">Setup password</label></td>
       <td><input id=setup_password class="flat" type="password" name="setup_password" value="" /></td>