Checking for secure connection

Forum|Forum|19 years ago
January 12, 2007
4 replies
439 views

We are building an eCommerce site using CFMX 7 on IIS 6 and would like to know how, once we have a certificate installed, we can be sure a page connection is secure and someone has not typed a http:// address instead of a https:// address

Thanks

Advanced techniques

This topic has been closed for replies.

A

Anonymous

Thanks for that answer, I will have to do a little remodelling.

N

Newsgroup_User

Inspiring

check the #cgi.server_port# for 443
and/or
cgi.https (on/off value)

if the cgi.server_port neq 443 then redirect or if cgi.https is off then
redirect
hth
--
Tim Carley
www.recfusion.com
info@NOSPAMINGrecfusion.com

A

Anonymous

Thanks for the suggestion. Works perfectly.

Another question though. We have a sign in on everypage on the site allowing people to access theur account details. However the sign-in processor is in the secure folder. So the checking for 443 error kicks them out when they submit their details. I have tried setting action="https://www.- - - - -/ but it still does not connect securely. Is there anyway i can post a form securely from a non-secure page? (I suspect i know the answer)

Rob

I

insuractive

Inspiring

You're best off using the settings built into your internet server (i.e. IIS) rather than trying to validate via the application server (CF). We've done this on our servers, but not being the person who did it I can't really offer much in the way of step-by-step instructions. Check google.

A

Anonymous

CGI.HTTP_REFERER will have the full path from the client if your page was reached by a link or a form post. Coming from a bookmark or typing in the URL does not produce a HTTP_REFERER, however.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded