Re: Securing one page

[Andy Doggrell]

You can also use the SSLRequireSSL directive in your .htaccess files to lock down certain directories. >>> [EMAIL PROTECTED] 09/21/00 07:26AM >>> At 05:53 AM 9/21/00, Nick Davies wrote: >It's just to save me time really.  I have a few shop sites to move to a >new server and that's how its been setup.  I can't be bother tolling >through loads of code to change everything. > >I'll do it properly some other time. Just set the root for HTTP and HTTPS to the same directory. A surprising number of web sites operate this way anyway. Since the code calls whatever.html via https://... it will be loaded securely. If someone happened to go out of their way to change the URL to http:// then it would load it insecurely, but that's their problem.  And if someone likewise goes out of their way to load other pages in your site securely, more power to them. Try it sometime on a commercial web site... for example, buy.com.  Same document root.  All documents can be served securely or insecurely. Jamie ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org User Support Mailing List                      [EMAIL PROTECTED] Automated List Manager                            [EMAIL PROTECTED]