redirect if https is set

[Craig Keightley]

i have the following script on my checkout page to check if https is set in
the address bar:

if ($_SERVER['HTTPS'] != "on")
{
$url = $_SERVER['SERVER_NAME'];
$query = $_SERVER['QUERY_STRING'];
$path = $_SERVER['PHP_SELF'];
header("Locatio n: https://$url$path?$quer y");
}
my problem is that i need to escape from https when another page is
selected. I tried changing the code on other pages (an include file) to
read:

if ($_SERVER['HTTPS'] != "off")
{
$url = $_SERVER['SERVER_NAME'];
$query = $_SERVER['QUERY_STRING'];
$path = $_SERVER['PHP_SELF'];
header("Locatio n: http://$url$path?$quer y");
}
but to no avail. Is this right?

Craig

[Tim Roberts]

"Craig Keightley" <do**@spam.me > wrote:

i have the following script on my checkout page to check if https is set in
the address bar:

if ($_SERVER['HTTPS'] != "on")
{
$url = $_SERVER['SERVER_NAME'];
$query = $_SERVER['QUERY_STRING'];
$path = $_SERVER['PHP_SELF'];
header("Locatio n: https://$url$path?$quer y");
}
my problem is that i need to escape from https when another page is
selected. I tried changing the code on other pages (an include file) to
read:

if ($_SERVER['HTTPS'] != "off")
{
$url = $_SERVER['SERVER_NAME'];
$query = $_SERVER['QUERY_STRING'];
$path = $_SERVER['PHP_SELF'];
header("Locatio n: http://$url$path?$quer y");
}

but to no avail. Is this right?

If the request is not https, the HTTPS variable will simply not exist. The
variable will NEVER equal "off".

Just use this:

if( $_SERVER['HTTPS'] == "on" )

Or, probably better:

function IsLinkSecure()
{
return isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == "on");
}

if( IsLinkSecure() )
{
...
}
--
- Tim Roberts, ti**@probo.com
Providenza & Boekelheide, Inc.

[R. Rajesh Jeba Anbiah]

Craig Keightley wrote:

i have the following script on my checkout page to check if https is set in the address bar:

if ($_SERVER['HTTPS'] != "on")

<snip>

if (!empty($_SERVE R['HTTPS']))
echo 'secure';

--
<?php echo 'Just another PHP saint'; ?>
Email: rrjanbiah-at-Y!com Blog: http://rajeshanbiah.blogspot.com/