Can a page tell if it's being seen HTTPS?

[EdwardMartinIII]

I have a form for collecting and sending data.

The site links to the HTTPS form of the page, but someone COULD just deliberately enter the page's URL into the browser.

Our site is a collection of static HTML pages right now.

Is there a way of determining whether or not the user is viewing that page as an https page, and further, is there a way to, say, disable the submission of the document if the page is simply being viewed under HTTP?

Thanks!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[ggriffit]

document.location.protocol should tell you if it is HTTP or HTTPS, but bear in mind that client side scripts can be amended by the end user - e.g. they save the page, change your Javascript then reload the page and submit the form.

The best way to do this is probably have your server ONLY serve HTTPS for that part of your site and then redirect requests for HTTP to HTTPS to cover all bases.

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/

 

[EdwardMartinIII]

Ah, being able to apply that amount of control from the server would be perfect. Can you explain how I might do that, or direct me to a tutorial?


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[ChrisHirst]

With HTML (this being the HTML section) no there isn't, server-side however; there are quite a few ways to check by inspecting the environment variables.

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.

 

[IPGuru]

It would all depend on what server is being used (apache, IIe, Somthing else) & any serverside applications being run.

you will need to report in the apropriat forum to get the best response


I do not Have A.D.D. im just easily, Hey look a Squirrel!

 

[EdwardMartinIII]

I'm hosting on an Apache site, Dreamhost, specifically.

If you can direct me to a more specific forum, I'd be most grateful.

Thanks!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[IPGuru]

I'm hosting on an Apache site, Dreamhost, specifically.

the Apache forum sounds like a good start point.


I do not Have A.D.D. im just easily, Hey look a Squirrel!

 

[EdwardMartinIII]

Cool, thanks!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

Should anyone else be interested, I posed this question in the Apache forum and eventually worked out the answer:

http://www.tek-tips.com/viewthread.cfm?qid=1634240&page=1

Cheers,


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door