Re: HTTPS vs. HTTP ?

From: Date: Fri, 05 Jul 2002 09:23:57 +0000
Subject: Re: HTTPS vs. HTTP ?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-105600@lists.php.net to get a copy of this message
I'm a little confused about how HTTPS actually works when you call it via a FORM tag or HEADER("Location: ...") This may sound like a stupid question -- but it was never explained to me, so... I have my users fill out (for example) FORM A -- this form has basic non-secure info. Then they press SUBMIT, now on FORM B, I want them to fill out their payment information. Now, I notice that when I go to web sites and fill out payment information, I see the little lock icon at the bottom of my browser, and the https://yadadada in the URL field... however, I'm unclear about something... If I call FORM B with HTTPS will my blank FORM B transmit to the user encrypted, and will I have to call HTTPS again for my PHP CC Processing App? In other words, what's taking place when I call a form or page with HTTPS? Is it that the data only gets encrypted on a SUBMIT ? Dunno if my question makes much sense .. but I guess I'd like to know if it's even required for me to call FORM B in a secure state (for the users CC data to be SENT encrypted), but instead just call the process attached to the FORM (submit button) on FORM B in HTTPS ?? Does that make sense? Jason "Miguel Cruz" <mnc@stoic.net> wrote in message news:Pine.LNX.4.44.0207050210560.27898-100000@stoic.net... > On Thu, 4 Jul 2002, Jason Caldwell wrote: > > Is there a way I can programmatically switch between HTTPS and HTTP... I use > > a lot of INCLUDE's instead of HEADER("Location: ..."); > > > > Can I use HEADER in another way (without redirecting) to activate HTTPS or > > HTTP for any given page? > > Nope. The protocol is determined by the client when it makes its request. > Once your code is running, it's too late. At that point you can only > redirect to a https:// URL, which leads the client to generate > a new > request. > > miguel >

« previous php.general (#105600) next »