hod.php: make sure data is always plain http