From 55d15d2eed069dcde5c30c93923c80571cbd1172 Mon Sep 17 00:00:00 2001
From: Florian Schlichting <fsfs@debian.org>
Date: Fri, 6 Jan 2017 11:26:32 +0100
Subject: [PATCH] use https for retrieving current_davical_version (fixes #1)

---
 htdocs/setup.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/htdocs/setup.php b/htdocs/setup.php
index ff727c43..250ce751 100644
--- a/htdocs/setup.php
+++ b/htdocs/setup.php
@@ -254,7 +254,7 @@ function check_davical_version() {
   global $c;
   if ( ! ini_get('allow_url_fopen') )
     return new CheckResult( false, translate("Cannot determine upstream version, because PHP has set “<a href=\"http://php.net/manual/en/filesystem.configuration.php#ini.allow-url-fopen\"><code>allow_url_fopen</code></a>” to “<code>FALSE</code>”."), 'dep_warning' );
-  $url = 'http://www.davical.org/current_davical_version?v='.$c->version_string;
+  $url = 'https://www.davical.org/current_davical_version?v='.$c->version_string;
   $version_file = @fopen($url, 'r');
   if ( ! $version_file ) return new CheckResult( false, translate("Could not retrieve") . " '$url'", 'dep_warning' );
   $current_version = htmlentities( trim(fread( $version_file,12)) );