Alain Roger wrote:
but i do not know if it's enough.

Sorry it doesn't use PHP, but this is what I do if the client wants an entire site to always use SSL. In the web server config for the non-ssl site, put a permanent redirection to the SSL site. For Apache I use the following vhost...

<VirtualHost 10.10.10.5:80>
   ServerName domain.com
   ServerAlias www.domain.com
   Redirect permanent / https://www.domain.com/
</VirtualHost>

Works great, and it retains the full URL they were aiming for. For example, if they go to http://domain.com/somewhere they end up at https://www.domain.com/somewhere.

I'm sure something similar is possible in most web servers.

-Stut

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to