RE: Re[2]: [PHP] File download doesn't work with SSL
| From: | John W. Holmes | Date: | Tue, 08 Oct 2002 12:08:25 +0000 |
| Subject: | RE: Re[2]: [PHP] File download doesn't work with SSL | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-119232@lists.php.net to get a copy of this message | ||
Okay, I tried just a page with only session_start() in it and the page
does send a no-cache, no-store header.
**** output from wget ****
D:\wget>wget -S http://coconut/usap/test.php
--08:04:13-- http://coconut/usap/test.php
=> `test.php.2'
Resolving coconut... done.
Connecting to coconut[192.168.2.124]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Server: Microsoft-IIS/5.1
3 Date: Tue, 08 Oct 2002 12:04:13 GMT
4 Content-type: text/html
5 X-Powered-By: PHP/4.2.3
6 Set-Cookie: PHPSESSID=9c3229d0448971b469b1af2af66a19b8; path=/
7 Expires: Thu, 19 Nov 1981 08:52:00 GMT
8 Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0
9 Pragma: no-cache
[ <=> ] 0 --.--K/s
08:04:13 (0.00 B/s) - `test.php.2' saved [0]
**** end output from wget ****
This is on my test server at home, under normal HTTP, but I imagine it
would be the same under HTTPS at work.
Is there any way to change this without messing with the source code?
---John Holmes...
> -----Original Message-----
> From: Rasmus Lerdorf [mailto:rasmus@php.net]
> Sent: Tuesday, October 08, 2002 1:00 AM
> To: Tom Rogers
> Cc: John W. Holmes; php-general@lists.php.net
> Subject: Re[2]: [PHP] File download doesn't work with SSL
>
> Why not just a simple wget -S https://... to see the headers?
>
> On Tue, 8 Oct 2002, Tom Rogers wrote:
>
> > Hi,
> >
> > Tuesday, October 8, 2002, 1:32:16 PM, you wrote:
> > JWH> Thanks for the help guys. Like I said, the download works fine
as
> long
> > JWH> as it's not over SSL. I will try to disable it and see if I can
> look at
> > JWH> the headers sent to see if a no-cache header is being sent,
even
> though
> > JWH> I haven't specified it. Regardless, even if it is, I have no
way of
> > JWH> stopping it, since I'm not controlling the sending of it, do I?
If
> it is
> > JWH> the session doing it, maybe I can send a no-store header before
I
> call
> > JWH> session_start?
> >
> > JWH> Hopefully upgrading to SP2 for IE6 will fix this. It's a lot of
> work to
> > JWH> update all the computers, though, but I don't have to do the
grunt
> work,
> > JWH> at least. :)
> >
> > Maybe this will help
> >
> > <?
> > $ch = curl_init();
> > curl_setopt ($ch, CURLOPT_URL,
> "https://www.melbourneit.com.au/maintenance/");
> > curl_setopt ($ch, CURLOPT_VERBOSE, 1);
> > curl_setopt ($ch, CURLOPT_HEADER, 1);
> > echo '<pre>';
> > if(!curl_exec ($ch)){
> > echo 'Error: '.curl_error($ch).'<br>';
> > }
> > echo '</pre>';
> > curl_close ($ch);
> > ?>
> >
> >
> >
> >
> >
> >
> > --
> > regards,
> > Tom
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php