Fix HTTPS embedding

Author: bergwerf

index.php

@@ -824,6 +824,8 @@
 							You can use the HTML code below to embed the current 3D model in your website.
 						</p>
 						<input id="embed-code" class="input" type="text" autocomplete="off" spellcheck="false" />
+						<h4>Embed URL</h4>
+						<input id="embed-url" class="input" type="text" autocomplete="off" spellcheck="false" />
 						<div class="footer">
 							<button class="btn close btn-primary">Close</button>
 						</div>

php/cif.php

@@ -30,10 +30,11 @@
 parse_str($_SERVER["QUERY_STRING"]);
 header("Content-Type: text");
 
-//allow embed.molview.org
-if($_SERVER["HTTP_ORIGIN"] == "http://embed.molview.org")
+//allow embed.molview.org and molview.org
+$origin = $_SERVER["HTTP_ORIGIN"];
+if($origin == 'http://molview.org' || $origin == 'https://embed.molview.org')
 {
-	header("Access-Control-Allow-Origin: ".$_SERVER["HTTP_ORIGIN"]);
+	header("Access-Control-Allow-Origin: ".$origin);
 }
 
 //connect to cod

src/js/Link.js

@@ -89,5 +89,6 @@ var Link = {
 
 		Link.embedHTML = '<iframe style="width: ' + $("#embed-width").val() + '; height: ' + $("#embed-height").val() + ';" frameborder="0" src="' + url + '"></iframe>';
 		$("#embed-code").val(Link.embedHTML);
+		$("#embed-url").val(url);
 	}
 };

src/js/Request.js

@@ -781,7 +781,7 @@ var Request = {
 			AJAX({
 				primary: true,
 				dataType: "text",
-				url: Request.API_ROOT + "api/cod/cif/" + codid + ".cif",
+				url: "https://molview.org/api/cod/cif/" + codid + ".cif",
 				defaultError: error,
 				success: success
 			});