When using session.secure() it will still allow connections to the
controller by regular http(). However I do not want any access, login form
or otherwise to this controller unless its over https.

Would I need to specify this on Apache VirtualHost configuration, like admin
is set in the book. Or is there a better way to do this in just web2py?

-Thadeus




On Thu, Oct 22, 2009 at 12:25 PM, Thadeus Burgess <[email protected]>wrote:

> Ok gotchya :)
>
> Thanks
>
> -Thadeus
>
>
>
>
>
> On Thu, Oct 22, 2009 at 1:23 PM, mdipierro <[email protected]>wrote:
>
>>
>> It is not a decorator. You just say
>>
>> session.secure() is a controller or a funciton
>>
>> On Oct 22, 12:43 pm, Thadeus Burgess <[email protected]> wrote:
>> > I am attempting to install mod_wsgi and having difficulty with it.
>> >
>> > Two controllers would work with session.secure() (that is a decorator
>> right?
>> > so @session.secure)
>> >
>> > -Thadeus
>> >
>> > On Thu, Oct 22, 2009 at 12:35 PM, mdipierro <[email protected]>
>> wrote:
>> >
>> > > Why two apps? Why not two controllers in the same app?
>> > > The admin controller could use
>> >
>> > > session.secure()
>> >
>> > > and that would make sure you cannot login without https (would not
>> > > work with mod_proxy).
>> >
>> > > Massimo
>> >
>> > > On Oct 22, 12:28 pm, Thadeus Burgess <[email protected]> wrote:
>> > > > Lets say I have an application, the public portion of the website
>> gives
>> > > > information and allows people to sign up to say a mailing list.
>> >
>> > > > Now I also want to use the same database models for the admin area,
>> where
>> > > > owners of this site can log in, edit users, send out mailing,
>> respond to
>> > > > questions, etc etc.
>> >
>> > > > The web panel portion of the site needs to run under https, and
>> needs to
>> > > > access the database of users that have signed up, however that is
>> the
>> > > only
>> > > > thing it needs to access is the db (which is using a mysql backend).
>> >
>> > > > Should I just symlink the db.py and run two apps? or is there a
>> better
>> > > > solution?
>> >
>> > > > -Thadeus
>> >>
>>
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to