unless you use web2py with a proxy you can apply http(s) filters using routes_in. It in the manual.
massimo On Nov 2, 2:00 pm, Thadeus Burgess <[email protected]> wrote: > When using session.secure() it will still allow connections to the > controller by regular http(). However I do not want any access, login form > or otherwise to this controller unless its over https. > > Would I need to specify this on Apache VirtualHost configuration, like admin > is set in the book. Or is there a better way to do this in just web2py? > > -Thadeus > > On Thu, Oct 22, 2009 at 12:25 PM, Thadeus Burgess > <[email protected]>wrote: > > > Ok gotchya :) > > > Thanks > > > -Thadeus > > > On Thu, Oct 22, 2009 at 1:23 PM, mdipierro <[email protected]>wrote: > > >> It is not a decorator. You just say > > >> session.secure() is a controller or a funciton > > >> On Oct 22, 12:43 pm, Thadeus Burgess <[email protected]> wrote: > >> > I am attempting to install mod_wsgi and having difficulty with it. > > >> > Two controllers would work with session.secure() (that is a decorator > >> right? > >> > so @session.secure) > > >> > -Thadeus > > >> > On Thu, Oct 22, 2009 at 12:35 PM, mdipierro <[email protected]> > >> wrote: > > >> > > Why two apps? Why not two controllers in the same app? > >> > > The admin controller could use > > >> > > session.secure() > > >> > > and that would make sure you cannot login without https (would not > >> > > work with mod_proxy). > > >> > > Massimo > > >> > > On Oct 22, 12:28 pm, Thadeus Burgess <[email protected]> wrote: > >> > > > Lets say I have an application, the public portion of the website > >> gives > >> > > > information and allows people to sign up to say a mailing list. > > >> > > > Now I also want to use the same database models for the admin area, > >> where > >> > > > owners of this site can log in, edit users, send out mailing, > >> respond to > >> > > > questions, etc etc. > > >> > > > The web panel portion of the site needs to run under https, and > >> needs to > >> > > > access the database of users that have signed up, however that is > >> the > >> > > only > >> > > > thing it needs to access is the db (which is using a mysql backend). > > >> > > > Should I just symlink the db.py and run two apps? or is there a > >> better > >> > > > solution? > > >> > > > -Thadeus > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/web2py?hl=en -~----------~----~----~----~------~----~------~--~---
