How to force a page to https://

I have added a login on a home page but now need the home page to use SSL. Is
there a way to force the page to https:// so that the userid and password on
encrypted? I already have SSL setup and use SSL in other places on the site
but I can force the https in those cases but in this case users enter the site
directly to the home page.

davidbarrackphoto wrote:

I have added a login on a home page but now need the home page to use SSL. Is
there a way to force the page to https:// so that the userid and password on
encrypted? I already have SSL setup and use SSL in other places on the site
but I can force the https in those cases but in this case users enter the site
directly to the home page.

What server language do you have?

If you have ASP you can use this:

<%
If Request.ServerVariables("HTTPS") = "off" Then
Response.Redirect "https://" & Request.ServerVariables("HTTP_HOST") &
Request.ServerVariables("URL") & "?" &
Request.ServerVariables("QUERY_STRING")
End If
%>

Thanks for the reply. I am using PHP. Do you have a code example for that also? Thanks.

davidbarrackphoto wrote:

Thanks for the reply. I am using PHP. Do you have a code example for that also? Thanks.

This is from Dave Buchholz, it was posted on the WebAssist forum:

<?php
if ($_SERVER['HTTP_HOST'] != 'site.local') // insert local hostname here
{
if (!isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) != 'on')
{
header("Location: https://".$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']);
}
}
?>

Steve

You can also do this via Apache, this was one of the http://www.htaccesselite.com/htacces...-ssl-vt61.html I found on the subject.