Forums

ASP

This topic is locked

FORCING SSL

Posted 29 Apr 2003 15:15:03
1
has voted
29 Apr 2003 15:15:03 David Stoltz posted:
Is there a way to "make" a user use the installed SSL cert on a site?

For instance, if you want them to log on at, <b>https</b>://www.mywebsite.com, but for whatever reason they take the S out, <b>http</b>://www.mywebsite.com ...can this be "caught" ?

I was trying to do this:
&lt;%if instr(1,request.ServerVariables("HTTP_REFERER","http:" &gt; 1 then response.Redirect("no_ssl.asp"%&gt;

But it doesn't seem to work...its supposed to be used on the page receiving the login info, and redirect if it comes from an http page, instead of an https page...

Is there a better way to do this?

Thanks!

Replies

Replied 30 Apr 2003 16:22:05
30 Apr 2003 16:22:05 Brent Colflesh replied:
Replied 30 Apr 2003 18:37:43
30 Apr 2003 18:37:43 David Stoltz replied:
Great Article - thanks!!!

Reply to this topic