forcing HTTPS on a page

[EdwardMartinIII]

Is there a way to force a page to be viewed under HTTPS?

I'm hosting a site on Apache, via Dreamhost.com

All the LINKS to the page are HTTPS, but this is just in case some User gets the strange notion to manually type "

HTTP://www......"

to go to the page.

I suppose there could be a client-side JS way of doing it, but a really DETERMINED User could probably work around that, huh?

Thanks!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[Noway2]

You can use .htacces and rewrite rules to always re-direct any not secure connections to the secure page. Here is a linkwith some examples.

 

[EdwardMartinIII]

Oh.

Man, could it be THAT simple?

I could simply add a line to my .htaccess file like:

Redirect permanent [URL unfurl="true"]http://www.banana.com/minx.html[/URL] [URL unfurl="true"]https://www.banana.com/minx.html[/URL]

Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

For some reason I thought redirects wouldn't work on full URLs.

Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[Einstein47]

For me I added a line in my httpd.conf file in the VirtualHost section for port 80. This is the line I added:

RedirectMatch ^/(.*) [URL unfurl="true"]https://myserver.domain.com/$1[/URL]

This way it will work for ALL resources on the server.

Einstein47 (Starbase47.com)
“PI is like love - simple, natural, irrational, endless, and very important“

 

[EdwardMartinIII]

Hm... I only want it to apply to a single page or reduced set of pages, not all the resources.


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

Is there a way of doing this for a single page?

(or set of individual pages?)


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

Okay, this is what did it:

RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^FileName.html$ [URL unfurl="true"]https://www.TargetDomain.com/FileName.html[/URL]

Enjoy!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

Argh, another domain's giving me grief in the exact same way.

I have

http://www.mydomain.com/

When I go to

http://www.mydomain.com/shop,

I want the site to switch over to HTTPS.

But ONLY when I go into that subdirectory.

In my top-level .htaccess file, I've tried:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/shop$ [URL unfurl="true"]https://www.mydomain.com/shop[/URL]

and

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ([URL unfurl="true"]http://www.mydomain.com/shop/.*)[/URL] [URL unfurl="true"]https://www.mydomain.com/shop/[/URL]

and

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (/shop/.*) [URL unfurl="true"]https://www.mydomain.com/shop/[/URL]

but none of these do the trick. None of them, when you manually enter

http://www.mydomain.com/shop/

, immediately snaps you into

https://www.mydomain.com/shop/

Can someone suggest what I'm doing wrong, or better yet how to fix it?

Thanks!


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

In case it helps, the .../shop directory goes to a Zen Cart installation.


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[EdwardMartinIII]

Ha! Solved it. I found the settings in Zen Cart that told it, basically, "Okay, you can open your transaction pages under HTTPS."

I KNEW it was had to be a setting somewhere in Zen Cart...


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door

 

[Einstein47]

Glad you found the config setting - sorry I wasn't more help.

Einstein47 (Starbase47.com)
“PI is like love - simple, natural, irrational, endless, and very important“

 

[EdwardMartinIII]

Nah, don't fret -- you guys got me started thinking in the right direction. It's good, it's good.

Besides, I had two different-but-slightly-related issues in one thread -- my bad if I caused confusion.

Cheers,


Edward

"Cut a hole in the door. Hang a flap. Criminy, why didn't I think of this earlier?!" -- inventor of the cat door