Forums
This topic is locked
FORCING SSL
Posted 29 Apr 2003 15:15:03
1
has voted
29 Apr 2003 15:15:03 David Stoltz posted:
Is there a way to "make" a user use the installed SSL cert on a site?For instance, if you want them to log on at, <b>https</b>://www.mywebsite.com, but for whatever reason they take the S out, <b>http</b>://www.mywebsite.com ...can this be "caught" ?
I was trying to do this:
<%if instr(1,request.ServerVariables("HTTP_REFERER","http:" > 1 then response.Redirect("no_ssl.asp"%>
But it doesn't seem to work...its supposed to be used on the page receiving the login info, and redirect if it comes from an http page, instead of an https page...
Is there a better way to do this?
Thanks!
Replies
Replied 30 Apr 2003 16:22:05
30 Apr 2003 16:22:05 Brent Colflesh replied:
Replied 30 Apr 2003 18:37:43
30 Apr 2003 18:37:43 David Stoltz replied:
Great Article - thanks!!!