SSL question

[funguru]

Hi.. i am designing a database driven website for a client with login info etc.. half way down the project the client wants the website on secure server.. therefore i am getting the server a SSL docomo certificate..

my question is, what changes would i need to do (if any) for my login and other pages to work while there are in SSL server?

Thanks a ton for the help.

[exam]

I depends on how you're doing the login, but normally you don't have to make any changes to your code. The HTTPS stream encrypts the data being sent to and from the server, but it is transparent to the backend application.

[funguru]

would i have to now have to do absolute urls and not relative.

so before if i was just linking to login.php, now i would have to link it to https://mydomamin.com/login.php ?

[Sketch]

Thats my understanding of it funguru.

However you may want to put a redirection on the login.php to ensure that it always goes to the secure version.

Something like this will help;

if($_SERVER['ssl_access'] != 1 && $_SERVER['HTTPS'] != on) {
	header("Location: https://www.yourdomain.com/login.php");
	exit();	
}

[funguru]

I get your point sketch.. just that it would be hard to make everything on absolute url.. i think there should be a better way..

[Sketch]

I have a feeling you can do it in your htaccess file, I just have no idea how to do it...

[exam]

Try this in your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Some servers don't have the HTTPS variable set. In that case, try this:

RewriteEngine On
RewriteCond %{SERVER_PORT} !443
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R]