SSL + PHP + IE annoying security warning popup

phprock

Hi,
I've used the following code to force user to use https protocol

if($_SERVER['SERVER_PORT'] != "443") {
    $newURL = "https://" . $_SERVER['SERVER_NAME'] . $_SERVER['SCRIPT_URL'];
    header("location: $newURL");
    exit;

It works fine in Firefox , mozilla and Opera . But in IE security warning pop up in every single page .This is very annoying. I get this message "Your are visiting a secure page and this contains unsecure infomation, do you want to continue".

It should ask only one but instead its asking every single link of the site.

Does anyone knows how to pix this problem.

Doug_G

There are a couple IE settings that might help, in Tools - Internet Options - Advanced, look down at the bottom of the list of options.

toplay

You have to make sure that images and links on the web page you're trying to display does not contain http:// so it will work with a secure AND non-secure pages. Otherwise, you'll have to dynamically change all the http:// links (including images) to https:// when you know you're on a secure page.

FYI: A function to detect if you're on a secure page or not:

   /**
    * secureConnection - Determines whether current connection is secure (SSL).
    *
    * @return bool Returns TRUE when a web connection is using SSL (HTTPS).
    * @access public
    */
    function secureConnection()
    {

    if (isSet($_SERVER['HTTPS']))
        return (0 == strcmp(strtolower($_SERVER['HTTPS']), 'on')) ? TRUE : FALSE;
    else
        return FALSE;

}

phprock

Thank you guys for the reply. But the problem is with IE only and i tested with different pcs with IE and i get the same warning message everytime i click on a link. I don't have any problem with images or anything all my images links are like this <img src="images/blah.gif">. This is very annyoying to customer when this popup message every time they click on a link.

my code structure is like this

indx.php which is a module loader and "m" parameter is a module name name and "file" parameter is the actual php file

index.php?m=product&file=payment

Is there any smarter way to force the browser to use https when he/she comes to "index.php?m=product&file=payment" page other wise just use http connection. In this It will reduce warning popup .

toplay

Are you using iframes? See:
http://support.microsoft.com/default.aspx?scid=kb;en-us;261188