navigate from a regular page to a secured page

=?Utf-8?B?YzY3NjIyOA==?=

Hi all,

What is the best way to lead customer from a regular page to a secured page?
Regularly, we use absolute path. say first ,a customer is on this regular
page for general information: http://xxxdomain.com/index.html, then customer
decides to buy something from our site. Then our program will provide an
absolute path like this: https://xxxdomain.com/buy.asp.

Recently I am doing migration and feel that the absolute path is not
convenient for program migration and domain merge. So I am wodering if there
is any other way to do it? any suggestions and comments?
--
Betty

Nov 29 '07 #1

Subscribe Reply

1525

Anthony Jones

"c676228" <be***@newsgrou p.nospamwrote in message
news:C0******** *************** ***********@mic rosoft.com...

Hi all,

What is the best way to lead customer from a regular page to a secured

page?

Regularly, we use absolute path. say first ,a customer is on this regular
page for general information: http://xxxdomain.com/index.html, then

customer

decides to buy something from our site. Then our program will provide an
absolute path like this: https://xxxdomain.com/buy.asp.

Recently I am doing migration and feel that the absolute path is not
convenient for program migration and domain merge. So I am wodering if

there

is any other way to do it? any suggestions and comments?

Since the start of the path changes from http to https what the client uses
has to be an absolute path.

It's a little bit awkard to do this in a html file since it gets no help
server side.
If you had a default.asp instead of index.html then :-

Dim sSecureBase
sSecureBase = "https://" & Request.ServerV ariables("SERVE R_NAME")

>%

<a href="<%=sSecur eBase%>/buy.asp"... </a>
If you have a lot of HTML that you don't want to change then you could leave
buy.asp available as http://xxxdomain.com/buy.asp and use this code in the
top :-

If Request.ServerV ariable("HTTPS" ) = "OFF" Then
'Channel not secure
Response.Redire ct "https://" & _
Request.ServerV ariables("SERVE R_NAME") & _
Request.ServerV ariables("UNENC ODED_URL")
Response.End
End If

You place this code in its own .asp file then include it in all ASP pages
that should be secure.

--
Anthony Jones - MVP ASP/ASP.NET

Nov 29 '07 #2

=?Utf-8?B?YzY3NjIyOA==?=

Hi Anthony,
Thank you so much for your response. I will take your second suggestion
since we have separated person to develop marketing content without any
knowledge about asp. With this piece of code, we can take care of any third
party agents who link to our sale processes using http.

Sincerely
--
Betty
"Anthony Jones" wrote:

"c676228" <be***@newsgrou p.nospamwrote in message
news:C0******** *************** ***********@mic rosoft.com...
Hi all,

What is the best way to lead customer from a regular page to a secured
page?
Regularly, we use absolute path. say first ,a customer is on this regular
page for general information: http://xxxdomain.com/index.html, then
customer
decides to buy something from our site. Then our program will provide an
absolute path like this: https://xxxdomain.com/buy.asp.

Recently I am doing migration and feel that the absolute path is not
convenient for program migration and domain merge. So I am wodering if
there
is any other way to do it? any suggestions and comments?

Since the start of the path changes from http to https what the client uses
has to be an absolute path.

It's a little bit awkard to do this in a html file since it gets no help
server side.
If you had a default.asp instead of index.html then :-

Dim sSecureBase
sSecureBase = "https://" & Request.ServerV ariables("SERVE R_NAME")

%

<a href="<%=sSecur eBase%>/buy.asp"... </a>
If you have a lot of HTML that you don't want to change then you could leave
buy.asp available as http://xxxdomain.com/buy.asp and use this code in the
top :-

If Request.ServerV ariable("HTTPS" ) = "OFF" Then
'Channel not secure
Response.Redire ct "https://" & _
Request.ServerV ariables("SERVE R_NAME") & _
Request.ServerV ariables("UNENC ODED_URL")
Response.End
End If

You place this code in its own .asp file then include it in all ASP pages
that should be secure.

--
Anthony Jones - MVP ASP/ASP.NET

Nov 30 '07 #3

Similar topics

1531

Posting to another page question

by: Ivan Demkovitch | last post by:

Hi! I have Portal application which is on http. However I like to do user authentification using SSL I like approach most sites use: They have <form name="loginForm" action="https://sss" method="post">

ASP.NET

2248

encrypted request from unencrypted page

by: mtanner | last post by:

I have a aspx page that is not secured via SSL, and the page must remain unencrypted. However, the page includes a web user control (ascx) that contains textboxes and submit button for login. The click event of the submit button is handled in the code behind of the user control. The problem I have is that the username and password are sent back to the server as clear text. How can I encrypted (with SSL) the request/response content of...

ASP.NET

1161

page vs directory security

by: js | last post by:

I am trying to use the form futhentication where the configuration parameters are specified in web.config in my application root directory "/". My applciation has secured pages and public pages scatter in various directory, and the start page (main.aspx) is public page with a logon button to control the accessibility of secured pages. When I use the following configuration, I will get "Server Error in "/" Applciation. How to set the...

ASP.NET

2766

page running twice

by: TS | last post by:

Hi, i have inherited a page from another user. The page is the target frame in a frameset. for some reason the whole page runs twice (page_load, init, etc. all run twice) I can't figure out how this is happening. there are no transfers or redirects that are occurring in the pages. the page runs thru all of its events then starts all over again. Trying to inspect the stack track doesn't help because when i get to the init the 2nd time,...

ASP.NET

3022

Mixing secured (HTTPS) and non-secured (HTTP) content in the samepage

by: Daniel Frechette | last post by:

Hi, Is it possible to have secured (SSL/HTTPS) and non-secured (HTTP) content in the same page without breaking the security? I am developing a secured reservation system in which the user can access Google Maps (not secured). The map is embedded in the page and does not open in a separate window. What solution do you recommend? Use iframes? If so, how?

Javascript

1118

Sort of dumb question on multi-page output?

by: bobmct | last post by:

Gentlemen; I have a mental block here so I am hoping for some guidance and ideas/suggestions with this one? I have a php program that processes a form (credit card) on a secured site (SSL) and while communicating with the card processor in the background it output a "please wait blah blah" page also on the secured site. When the return from the card processor arrives based on the response either the original form is redisplayed...

PHP

17978

Webbrowser.navigate() not firing

by: Ryan Ramsey | last post by:

I have been chasing this one down for a week and have narrowed it down to a machine issue. I have the following code: webBrowser.Navigate(http://finao.net/post_dkp.php?database=40); Basically all this script does is create an xml output file. After the navigate, the function stops and is triggered again when webbrowser_DocumentCompleted fires and then the XML file is read by the

C# / C Sharp

2972

secured credit card

by: securedcardss | last post by:

http://card.2youtop.info secured credit card card credit instant secured card cash credit secured card

C# / C Sharp

103

6885

How to navigate away from quicksand domains which hold your browser captive until you install their software?

by: Tom | last post by:

How do we get out of the browser infinite loop quicksand when we navigate to web pages designed to lock us in and force us to hit the "pay me" button (whatever they want to force you to do)? These are just a sample of nasty quicksand web pages I've run into which lock your browser into a loop and won't let you get out until you hit the "install" or "run" or "OK" button... (whatever it is they want you to do). http://www.spywareiso.com...

HTML / CSS

9572

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10562

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10303

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

10070

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

7608

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

5508

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

5639

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

3803

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

2978

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General