Re: How to be sure to use SSL

From: Date: Fri, 08 Dec 2006 14:56:03 +0000
Subject: Re: How to be sure to use SSL
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-245653@lists.php.net to get a copy of this message
Alain Roger wrote:
but i do not know if it's enough.
Sorry it doesn't use PHP, but this is what I do if the client wants an entire site to always use SSL. In the web server config for the non-ssl site, put a permanent redirection to the SSL site. For Apache I use the following vhost... <VirtualHost 10.10.10.5:80> ServerName domain.com ServerAlias www.domain.com Redirect permanent / https://www.domain.com/ </VirtualHost> Works great, and it retains the full URL they were aiming for. For example, if they go to http://domain.com/somewhere they end up at https://www.domain.com/somewhere. I'm sure something similar is possible in most web servers. -Stut

« previous php.general (#245653) next »