This is a security issue: CFLocation actually does a client side (HTTP 301 or 302) redirect. I would recommend using IIS7's URL rewrite capability (there's an ISAPI DLL for prior versions), as this takes place before the response it sent (and thus before control handed off to ColdFusion).
-- Billy Cravens On Wed, Jul 15, 2009 at 3:55 PM, Mark Davis <[email protected]>wrote: > hey guys, > > anyone have a good method of forcing https for requests to a specific > application and forcing http for others? Our site has numerous applications > (defined as having their own application.cfc or cfm.) and as the user > navigates from some sections to others, I want to redirect between https and > http. > > I was trying something as simple as adding this in the application.cfm... > > <cfif > cgi.SERVER_PORT eq 80> > > doing a cflocation to the same url and query string they had but with > https > > </cfif> > but I generally get browser errors "IE cannot display thge webpage." Can > IIS do redirect like this on different directores? or something else? > > *Mark Davis **| Developer* > ** > > ** > ......................................................................................................................... > > Round Table Group, Inc. > > (281) 717-4575 > > [email protected] > > www.roundtablegroup.com > > > ......................................................................................................................... > > * * > [image: > https://www.roundtablegroup.com/secure/staff/emailSignature/RTG_logo.bmp]* > * > > *The Leading Authority in Expert Witness Search & **ReferralTM*** > > CONFIDENTIALITY NOTE: This e-mail, and any attachments thereto, is > intended only for use by the addressee(s) named in the message originated by > me and may contain legally privileged and/or confidential information. If > the reader of this message is not the intended recipient, you are hereby > notified that any dissemination, distribution or copying of this > communication is strictly prohibited. If you have received this email in > error, please notify me immediately by telephone and permanently delete the > original and any copy of the email, and any printout thereof. Thank you. > > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the "Houston ColdFusion Users' Group" discussion list. To unsubscribe, send email to [email protected] For more options, visit http://groups.google.com/group/houcfug?hl=en -~----------~----~----~----~------~----~------~--~---
<<inline: image001.gif>>
