Hi All,
I've seen many references to the $_SERVER['HTTPS'] variable, which is set to
the string 'on' when the client is connected via HTTPS rather than regular
HTTP. However, I have been unable to find any references to it in the
official PHP documentation (many times in the user contributed notes,
though).
Often, undocumented features go away with future releases, since "nobody
should have been using them anyway," etc. For this reason I am concerned
about using this variable in order to determine if the client is connected
via HTTPS. Is there a better way? Or should I not be concerned about the
variable disappearing/getting renamed?
Sincerely,
-Josh
4  10151 
On Mon, 15 Nov 2004 18:16:34 +0000, Joshua Beall wrote: Hi All,
I've seen many references to the $_SERVER['HTTPS'] variable, which is set to
the string 'on' when the client is connected via HTTPS rather than regular
HTTP. However, I have been unable to find any references to it in the
official PHP documentation (many times in the user contributed notes,
though).
Often, undocumented features go away with future releases, since "nobody
should have been using them anyway," etc. For this reason I am concerned
about using this variable in order to determine if the client is connected
via HTTPS. Is there a better way? Or should I not be concerned about the
variable disappearing/getting renamed?
Sincerely,
-Josh
Hello Josh,
Please check this page: http://es2.php.net/reserved.variables
Quote:
"$_SERVER is an array containing information such as headers, paths, and
script locations. The entries in this array are created by the webserver.
There is no guarantee that every webserver will provide any of these;
servers may omit some, or provide others not listed here. That said, a
large number of these variables are accounted for in the CGI 1.1
specification, so you should be able to expect those."
This basically means that PHP itself has nothing to do with this variable,
since it's up to the webserver to set it or not. Apparently mod_ssl does
set this variable, so you would have to watch this module if it changes or
removes the HTTPS environment variable.
One other way would be to check on which port the user is connected to,
usually port 443 is always https--but then again, it doesn't have to be.
So if it was up to me, I would check the $_SERVER['HTTPS'] setting rather
than the port. Just make sure that your scripts are running on servers
that do use mod_ssl.
DrTebi
*** Joshua Beall wrote/escribió (Mon, 15 Nov 2004 18:16:34 GMT): I've seen many references to the $_SERVER['HTTPS'] variable, which is set to
the string 'on' when the client is connected via HTTPS rather than regular
HTTP. However, I have been unable to find any references to it in the
official PHP documentation (many times in the user contributed notes,
though).
These environment variables are created by the SSL module: http://www.modssl.org/docs/2.8/ssl_reference.html#ToC25
--
-- Álvaro G. Vicario - Burgos, Spain
-- Thank you for not e-mailing me your questions
--
"Joshua Beall" <jb****@donotsp am.remove.me.he raldic.us> wrote in message
news:6o6md.7395 $pP5.5571@trndd c05... Hi All,
I've seen many references to the $_SERVER['HTTPS'] variable, which is set
to the string 'on' when the client is connected via HTTPS rather than regular
HTTP. However, I have been unable to find any references to it in the
official PHP documentation (many times in the user contributed notes,
though).
Often, undocumented features go away with future releases, since "nobody
should have been using them anyway," etc. For this reason I am concerned
about using this variable in order to determine if the client is connected
via HTTPS. Is there a better way? Or should I not be concerned about the
variable disappearing/getting renamed?
$_SERVER entries are set by the web server. The HTTPS element is set by
Apache modssl. You can find that documented here
( http://www.modssl.org/docs/2.8/ssl_reference.html#ToC25) which I found by
looking in the notes attached to the $_SERVER variable documentation at
( http://us2.php.net/manual/en/reserve...variables.serv
er)
- Virgil
Dear sir,
https means if your host is a secure server, not the client is connected via
https. it is not undocumented and it is visible in the phpinfo().
$_SERVER['HTTPS'] merely mentions if the server is secure or not and
effectively you can use the server as a secure server.
people do use it and it is an important function. otherwise they would not
have it there.
i think if variables disappear, they are not needed in the first place. at
this moment, i do not think it is any reason to panic.
thanking you
sumeet shroff
"Joshua Beall" <jb****@donotsp am.remove.me.he raldic.us> wrote in message
news:6o6md.7395 $pP5.5571@trndd c05... Hi All,
I've seen many references to the $_SERVER['HTTPS'] variable, which is set
to the string 'on' when the client is connected via HTTPS rather than regular
HTTP. However, I have been unable to find any references to it in the
official PHP documentation (many times in the user contributed notes,
though).
Often, undocumented features go away with future releases, since "nobody
should have been using them anyway," etc. For this reason I am concerned
about using this variable in order to determine if the client is connected
via HTTPS. Is there a better way? Or should I not be concerned about the
variable disappearing/getting renamed?
Sincerely,
-Josh
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Phil Powell |
last post by:
echo "val = $val<P>";
list($mySection, $myDisplay) = explode('|', $val);
echo "mySection = $mySection and myDisplay = $myDisplay<P>";
In using PHP 4.3.6 here are my results:
I narrowed down the problem to this:
|
by: Darrell Sparti, MCSD |
last post by:
There have been many postings about this subject on this newsgroup.
Unfortunately, they're incorrect. You can't just cast a value in C#
and have it work for all ASCII characters. Nor can you use the ASCII
encoding as some have suggested.
The undocumented truth is, Microsoft uses the Western European encoding
in these functions. If you don't believe me, use 137 in your VB Chr
function then compare the C# output if you just cast it or...
|
by: Steven Bethard |
last post by:
So I've recently been making pretty frequent use of textwrap.dedent() to
allow me to use triple-quoted strings at indented levels of code without
getting the extra spaces prefixed to each line. I discovered today that
not only does textwrap.dedent() strip any leading spaces, but it also
substitutes any internal tabs with spaces. For example::
py> def test():
.... x = ('abcd efgh\n'
.... 'ijkl mnop\n')
.... y =...
|
by: Raymond Hettinger |
last post by:
Proposal
--------
I am gathering data to evaluate a request for an alternate version of
itertools.izip() with a None fill-in feature like that for the built-in
map() function:
>>> map(None, 'abc', '12345') # demonstrate map's None fill-in feature
The motivation is to provide a means for looping over all data elements
|
by: Raymond Hettinger |
last post by:
I am evaluating a request for an alternate version of itertools.izip()
that has a None fill-in feature like the built-in map function:
>>> map(None, 'abc', '12345') # demonstrate map's None fill-in feature
The movitation is to provide a means for looping over all data elements
when the input lengths are unequal. The question of the day is whether
that is both a common need and a good approach to real-world problems.
The answer to...
| | |
by: Terry |
last post by:
I have noiticed a change in behavior between VB6 and VB.Net (2003 and 2005)
that I don't find documented anywhere. It has to do with 'causesvalidation'
and the button on the Form defined to be the cancelbutton. According to the
documentation: "The cancel button for a form is the button control that is
clicked whenever the user presses the ESC key." Yet 'clicking' the button
and pressing the escape key do not produce the same results. ...
|
by: Antonio Paglia |
last post by:
Hello. I have tried to insert this items into a SortedList.
dic = New SortedList
dic.Add("<<", "<<")
dic.Add("==", "==")
dic.Add(">>", ">>")
dic.Add("@@", "@@")
dic.Add("??", "??")
Debugging this peace of code I have notice that '??' appears as first item,
|
by: bartonc |
last post by:
This article documents some Boa Constructor features as I discover them.
Here is the first handy feature that I find very useful:
Hold down Ctrl and put the I-Beam cursor over a variable defined elsewhere in a module. The variable will become underlined during this mouse movement. Now click on the variable and the insertion point will be moved to the line where that varibale is defined. Pretty nifty, Huh?
Alt+t is the Code Template...
|
by: Michele Simionato |
last post by:
I see that the pkgutil module has many useful functions which are
however undocumented.
Does anybody know why it is so? In particolar, can I safely use
pkg.walk_packages
without risking a change of interface in the future? I looks unlikely,
since pkgutil is
used in setuptools, but I want to be sure before relying on it.
Michele Simionato
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| | |
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
