Re: checking for and enforcing https

tedd wrote: > Sometimes I feel like a child here. > > Under what circumstances would one require that? > > If your script is in a https directory, isn't that secure? OR, is > this something else? > > Please explain. You might want to do such checks if your website (www.example.com) is accessible over http and https both. Typically you'll have separate content, but it might be possible for a user to accidentally access non-secure content over https which is just wasteful, or vice versa which is clearly a security risk. /Per Jessen, Zürich