I'm creating a login system where people enter their username/password on a secure form, I do authentication with a database, and then I need to redirect them to a non secure page.
I'm doing the redirect with header("Location: http://www.url.com"). When I do the redirect, browsers complain that they are being redirected to a non secure site, and I might be trying to steal their first born or something.
Many sites (eg: Hotmail) do this without any kind of warning messages. Any ideas how?