Re: Security warning

From: Date: Mon, 22 Sep 2008 19:49:48 +0000
Subject: Re: Security warning
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-280720@lists.php.net to get a copy of this message
On Mon, 2008-09-22 at 14:48 -0400, tedd wrote: > Hi gang: > > I have a problem (please, no remarks). :-) > > I have a site where a security certificate is in place and it works. > The user can login and review their information and purchase stuff. > When the user goes from the http to the https side of things, > everything is fine -- their no warning given and the user can enter > their cc information, buy stuff, and everything appears secure. > > However, when the user exits https and returns back to the http side > of things, the user receives a warning. > > I suspect that this is because I am continuing to keep the user > logged in -- in other words, I'm keeping an authorization session in > effect. I say this because, when I don't do that, the security > warning isn't thrown. > > I suspect that the purpose of this warning is to alert the user when > they are taken from a https directory to a http directory. > > Now my question is "Can I turn off that security warning?" or find a > way around it? > > I want the user after purchasing an item to return to the normal http > side of things and still be logged on -- how do you guys do it? > > Thanks, > > tedd > > -- > ------- > http://sperling.com > http://ancientstones.com ô®G > ¦BèZʃ÷¸�®http://earthstones.com > I think that warning is built into the browsers that recognise you are moving from to a non-secure version of the same domain. If you give your users some kind of hint that this may happen it should alleviate their fears. Ash www.ashleysheridan.co.uk

« previous php.general (#280720) next »