> How do I make sure when implementing SSL that a fuseaction such as
> http://www.mysite.com/index.asp?fuseaction=People.ShowSensitiveStuff gets
> detected and sent to a message indicating secure connections only but that
> https://www.mysite.com/index.asp?fuseaction=People.ShowSensitiveStuff works
> because it has the 's' at the end of the 'http'?
> 
> Only part of the site needs to be secure so https and http will be
> intermingled.

I have a method that redirects to SSL or non-SSL as required. I doubt it is
optimal, but it works.

`***************************************************************************
********
` use_SSL
`
` Switch to SSL if it is not SSL
`***************************************************************************
********

method "use_SSL" ($ssl = TRUE)

    if ($ssl)
        if ((get request info ("*secure")) = "0")
            redirect ("https://"; + replace string (get request info
("Host"); ":" + get request info ("*host port"); "") + db_requested_url)
        end if
    else
        if ((get request info ("*secure")) = "1")
            redirect ("http://"; + get request info ("Host") +
db_requested_url)
        end if    
end method


`***************************************************************************
********
` db_requested_url
`
` Return the requested url with parameters
`***************************************************************************
********

method "db_requested_url"

    c_text ($url)
    $url := get query params
    if (length ($url) > 0)
        $url := requested url + "?"+ $url
    else
        $url := requested url
    end if
    return ($url)
end method


Will


_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/

Reply via email to