{"issue":{"state":"open","pull_request":{"diff_url":null,"html_url":null,"patch_url":null},"user":{"avatar_url":"https://secure.gravatar.com/avatar/2f9627b73e1e5257020c9c7cbcdd6610?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"2f9627b73e1e5257020c9c7cbcdd6610","url":"https://api.github.com/users/bitbucket-import","login":"bitbucket-import","id":991171},"milestone":null,"labels":[{"name":"Bitbucket New","color":"DDDDDD","url":"https://api.github.com/repos/EllisLab/CodeIgniter/labels/Bitbucket+New"}],"assignee":null,"updated_at":"2011-11-09T01:55:49Z","closed_at":null,"comments":1,"url":"https://api.github.com/repos/EllisLab/CodeIgniter/issues/190","body":"This is due to $_SERVER['HTTPS'] do not exists in the default fastcgi/php-fpm configuration delivered with nginx.\r\n\r\n\r\nA work around is to force $_SERVER['HTTPS'] = 'on' in a config, or set it manually in nginx.conf if using HTTPS.\r\n\r\n\r\nThe best solution would be to change csrf_set_cookie() to check for SERVER_PORT and HTTPS, if either matches - use the connection is secure - and the cookie should be set.\r\n\r\n\r\n/ Jim","html_url":"https://github.com/EllisLab/CodeIgniter/issues/190","title":"csrf_set_cookie() fails under nginx+php-fpm","number":190,"id":1442505,"created_at":"2011-08-19T14:50:48Z"},"action":"created","comment":{"user":{"avatar_url":"https://secure.gravatar.com/avatar/2d6c61518f5219807ebdf7bb1af1af4d?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"2d6c61518f5219807ebdf7bb1af1af4d","url":"https://api.github.com/users/tech163","login":"tech163","id":1179392},"updated_at":"2011-11-09T01:55:49Z","url":"https://api.github.com/repos/EllisLab/CodeIgniter/issues/comments/2676569","body":"It's just most tutorials don't instruct users to pass  'fastcgi_param HTTPS on', while they should. ","id":2676569,"created_at":"2011-11-09T01:55:49Z"}}