Ok, so the rule sets are now working somewhat.
On the HTTP(80) side, I have the following:
RewriteCond %{REQUEST_URI} !^/$
RewriteCond %{REQUEST_URI} !^/home
RewriteCond %{REQUEST_URI} !^/insurance-tips/$
RewriteCond %{REQUEST_URI} !^/add-a-tip
RewriteCond %{HTTPS} off
RewriteRule / https://www.woodsins.com%{REQUEST_URI} [R,L]
These set of rules & conditions seem to be working as intended.
On the HTTPS(443) side, I have the following:
RewriteCond %{REQUEST_URI} ^/$
RewriteCond %{HTTPS} on
RewriteRule / http://www.woodsins.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/home
RewriteCond %{HTTPS} on
RewriteRule / http://www.woodsins.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/insurance-tips/$
RewriteCond %{HTTPS} on
RewriteRule / http://www.woodsins.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/add-a-tip/$
RewriteCond %{HTTPS} on
RewriteRule / http://www.woodsins.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/index.php/$
RewriteCond %{HTTPS} on
RewriteRule / http://www.woodsins.com%{REQUEST_URI} [R,L]
Only some of these rules appear to be working properly, in particular the ^/$
and the ^/index.php/$ (which I added myself).
Please correct me if I'm wrong, but it feels like maybe I'm just throwing
myself into a loopback that just ends up forcing SSL on everything but the
index.php portion. As a side note, I had to add the /$ to the ^/insurance-tips
because when it's not there, that particular page becomes disabled.
Again, thanks for the assistance with this issue.
-----Original Message-----
From: Eugene [mailto:[email protected]]
Sent: Thursday, March 03, 2011 10:55 AM
To: [email protected]
Subject: RE: [users@httpd] Rewrite Conditions & Rules
My mistake. Bottom part must be like this:
RewriteCond %{REQUEST_URI} ^/$
RewriteCond %{HTTPS} on
RewriteRule / http://www.website.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/home
RewriteCond %{HTTPS} on
RewriteRule / http://www.website.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/insurance-tips
RewriteCond %{HTTPS} on
RewriteRule / http://www.website.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/add-a-tip
RewriteCond %{HTTPS} on
RewriteRule / http://www.website.com%{REQUEST_URI} [R,L]
-----Original Message-----
From: Ian Stradling <[email protected]>
Reply-to: "[email protected]" <[email protected]>
To: [email protected] <[email protected]>
Subject: RE: [users@httpd] Rewrite Conditions & Rules
Date: Thu, 3 Mar 2011 17:39:33 +0000
No, unfortunately it doesn’t. When a visitor first goes to the website, it
stays in HTTP. As soon as a visitor clicks on one of the HTTPS links, the
rewrite rules will force HTTPS for the rest of the time that the visitor is on
the site regardless of the links they click on.
I need the Rewrite rules to be able to take it out of HTTPS when they click on
a portion of the site that isn't HTTPS. The code all looks like it should work,
but there's something strange going on with it. It looks like the second set
of code isn't firing.
-----Original Message-----
From: Eugene [mailto:[email protected]]
Sent: Thursday, March 03, 2011 9:33 AM
To: [email protected]
Subject: RE: [users@httpd] Rewrite Conditions & Rules
Doesn't it fit your needs?
RewriteCond %{REQUEST_URI} !^/$
RewriteCond %{REQUEST_URI} !^/home
RewriteCond %{REQUEST_URI} !^/insurance-tips
RewriteCond %{REQUEST_URI} !^/add-a-tip
RewriteCond %{HTTPS} off
RewriteRule / https://www.website.com%{REQUEST_URI} [R,L]
RewriteCond %{REQUEST_URI} ^/$
RewriteCond %{REQUEST_URI} ^/home
RewriteCond %{REQUEST_URI} ^/insurance-tips
RewriteCond %{REQUEST_URI} ^/add-a-tip
RewriteCond %{HTTPS} on
RewriteRule / http://www.website.com%{REQUEST_URI} [R,L]
-----Original Message-----
From: Ian Stradling <[email protected]>
Reply-to: "[email protected]" <[email protected]>
To: [email protected] <[email protected]>
Subject: RE: [users@httpd] Rewrite Conditions & Rules
Date: Thu, 3 Mar 2011 16:05:54 +0000
Has anyone ever used mod_rewrite to try and force SSL on certain portions of a
website?
I feel like I'm running around in circles trying to figure it out. As a point
of reiteration, I'm using the following code:
RewriteCond %{REQUEST_URI} !^/
RewriteCond %{REQUEST_URI} !^/home
RewriteCond %{REQUEST_URI} !^/insurance-tips
RewriteCond %{REQUEST_URI} !^/add-a-tip
RewriteCond %{HTTPS} !=on
RewriteRule .* https://www.website.com/$1 [R,L]
I've tried implementing a couple of these but it never really does what I think
it's supposed to do. If someone could please point me in the right direction,
I'd appreciate it.
Thanks!
-----Original Message-----
From: Ian Stradling [mailto:[email protected]]
Sent: Monday, February 28, 2011 12:40 PM
To: [email protected]
Subject: [users@httpd] re: Rewrite Conditions & Rules
Hi Folks,
I'm new to the manual side of web administration, and am using Apache2 in a
Debian Linux distribution.
I was asked by my boss to set up a situation where we force SSL on certain
portions of a website, and turn it off when the viewer goes to another page on
the site. I have decided to use mod_rewrite to do so. I've read through and
have come up with the below code.
This set of code is on the base port 80 site. I have created this code with
the intent to rewrite the URL to SSL if the page is not the string.
RewriteCond %{REQUEST_URI} !^/
RewriteCond %{REQUEST_URI} !^/home
RewriteCond %{REQUEST_URI} !^/insurance-tips
RewriteCond %{REQUEST_URI} !^/add-a-tip
RewriteCond %{HTTPS} !=on
RewriteRule .* https://www.website.com/$1 [R,L]
This set of code, I have written on the 443 SSL site.
RewriteCond %{REQUEST_URI} ^/home
RewriteCond %{REQUEST_URI} ^/insurance-tips
RewriteCond %{REQUEST_URI} ^/add-a-tip
RewriteCond %{HTTPS} =on
RewriteRule ^/(.*) http://www.website.com/$1 [R,L]
When you first go to the site, it behaves as I want it to and leaves everything
as HTTP. But when you go back to the home page, it is supposed to remove the
HTTPS, but it does not. I'm hoping that someone can critique my code here and
tell me where I've gone wrong. I appreciate any feedback.
Thanks!
Ian Stradling
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [email protected]
" from the digest: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [email protected]
" from the digest: [email protected]
For additional commands, e-mail: [email protected]
