Re: How to be sure to use SSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Alain Roger wrote:
but i do not know if it's enough.

Sorry it doesn't use PHP, but this is what I do if the client wants an entire site to always use SSL. In the web server config for the non-ssl site, put a permanent redirection to the SSL site. For Apache I use the following vhost...

<VirtualHost 10.10.10.5:80>
   ServerName domain.com
   ServerAlias www.domain.com
   Redirect permanent / https://www.domain.com/
</VirtualHost>

Works great, and it retains the full URL they were aiming for. For example, if they go to http://domain.com/somewhere they end up at https://www.domain.com/somewhere.

I'm sure something similar is possible in most web servers.

-Stut

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux