page has to load from this url

Robert_Blackwel

I have a page that is supposed to be secure, but I need a way to make it so if the page is accessed without https, it will reload with https.

<?
if(substr($_SERVER['SCRIPT_URI'],0,5)!="https")
header("Location: https://url");
?>

someone gave me this code to try but when I do so, the page just tries to load indefinitely.

rebelo

If you have apache, you can probably use the HTTPS server variable to check like this:

if ( !isset($_SERVER['HTTPS']) || strtolower($_SERVER['HTTPS']) != 'on' ) {
   header ('Location: [url]https://[/url]'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
   exit();
}

Robert_Blackwel

Thanks, but I'm on IIS.

rebelo

Hmm. I looked around a bit and SCRIPT_URI doesn't even show as an available value in the PHP documentation for the SERVER superglobal. It might be a mod_ssl specific var.

The only thing I can find for doing it for you would be to use a test on the port being used, since SSL will go through port 443 (unless you changed the ssl port).

if ($_SERVER["SERVER_PORT"] != 443) {
    // redirect to https...
}

halojoy

<?php
// shouldnt it be
$url = $_SERVER['SCRIPT_URI'];
if( substr( $url, 0, 5 ) != "https" ) {
$url = "https" . substr( $_SERVER['SCRIPT_URI'],6 );
}
header("Location:$url"); 
?>

Robert_Blackwel

Halojoy, I tried yours too but all that did was change the url to

http://domain.com/https

Rebelo, I'm trying your first suggestion.

<?php 
if ( !isset($_SERVER['HTTPS']) || strtolower($_SERVER['HTTPS']) != 'on' ) { 
   header ('Location: [url]https://[/url]'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']); 
   exit(); 
}
?>

I had to remove the <a href etc cause it was just passing that into the url.

So far, with that code, it will load https://domain.com
(trying to problem solve while I write this.)
I tried adding /page.php but all that did is make the url https://domain.comphp

then I rememberd that periods were for concatination and I changed it to this (me = programming nube)

header ('Location: [url]https://[/url]'.$SERVER['HTTP_HOST'].$SERVER['REQUEST_URI'].'/payonline.php');

RESOLVED - WOOHOO!

halojoy

Originally posted by Robert Blackwel
Halojoy, I tried yours too but all that did was change the url to
http://domain.com/https

Great you solved this!

For me this works:

<?php

$path = "/directory/securepage.php";

header( "Location:[url]https://[/url]{$_SERVER['HTTP_HOST']}{$path}" );

?>

rebelo

RESOLVED - WOOHOO!

Right on, man. Glad it's working now.

(hints at signature)