Re: Security warning
| From: | Ashley Sheridan | Date: | Mon, 22 Sep 2008 19:49:48 +0000 |
| Subject: | Re: Security warning | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-280720@lists.php.net to get a copy of this message | ||
On Mon, 2008-09-22 at 14:48 -0400, tedd wrote:
> Hi gang:
>
> I have a problem (please, no remarks). :-)
>
> I have a site where a security certificate is in place and it works.
> The user can login and review their information and purchase stuff.
> When the user goes from the http to the https side of things,
> everything is fine -- their no warning given and the user can enter
> their cc information, buy stuff, and everything appears secure.
>
> However, when the user exits https and returns back to the http side
> of things, the user receives a warning.
>
> I suspect that this is because I am continuing to keep the user
> logged in -- in other words, I'm keeping an authorization session in
> effect. I say this because, when I don't do that, the security
> warning isn't thrown.
>
> I suspect that the purpose of this warning is to alert the user when
> they are taken from a https directory to a http directory.
>
> Now my question is "Can I turn off that security warning?" or find a
> way around it?
>
> I want the user after purchasing an item to return to the normal http
> side of things and still be logged on -- how do you guys do it?
>
> Thanks,
>
> tedd
>
> --
> -------
> http://sperling.com
> http://ancientstones.com ô®G
> ¦BèZʃ÷¸�®http://earthstones.com
>
I think that warning is built into the browsers that recognise you are
moving from to a non-secure version of the same domain. If you give your
users some kind of hint that this may happen it should alleviate their
fears.
Ash
www.ashleysheridan.co.uk