Can't redirect from HTTPS to HTTP in Firefox?

[howa]

a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location: http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

any suggestions?

thanks.

[e_matthes]

On Jun 6, 7:53 am, howa <[e-mail]:

a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location:http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

any suggestions?

thanks.

I just dealt with this, and I ended up using an .htaccess file to
rewrite http or https as appropriate. Have you considered this
approach?

[R. Rajesh Jeba Anbiah]

On Jun 6, 8:53 pm, howa <[e-mail]:

a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location:http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

any suggestions?

Use HTTP sniffers (say, LiveHTTPHeaders) or post the URL.

--
<?php echo 'Just another PHP saint'; ?>
Email: rrjanbiah-at-Y!com Blog: http://rajeshanbiah.blogspot.com/

[howa]

On Jun 7, 12:35 am, [e-mail] wrote:

On Jun 6, 7:53 am, howa <[e-mail]:

a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location:http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

any suggestions?

thanks.

I just dealt with this, and I ended up using an .htaccess file to
rewrite http or https as appropriate. Have you considered this
approach?

you mean mod_rewrite or just apache redirect?

[e_matthes]

On Jun 6, 8:43 am, howa <[e-mail]:

On Jun 7, 12:35 am, [e-mail] wrote:

On Jun 6, 7:53 am, howa <[e-mail]:

a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location:http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

any suggestions?

thanks.

I just dealt with this, and I ended up using an .htaccess file to
rewrite http or https as appropriate. Have you considered this
approach?

you mean mod_rewrite or just apache redirect?

I'm not sure exactly what it's called, but this is how it works. I
have one folder containing all the pages that should only be served
over https. In that folder, I have an htaccess file that contains the
following lines:

RewriteEngine On
RewriteCond %{SERVER_PORT} !443
RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI}
That ensures any request to this folder is served over https. There
are many links out from this folder, so following one of those links
might keep the user on https longer than necessary. So, in the public
html folder there is an htaccess file with these lines:

RewriteEngine On
RewriteCond %{SERVER_PORT} 443
RewriteRule (.*) http://%{SERVER_NAME}%{REQUEST_URI}

Works well so far.

[howa]

On Jun 7, 12:54 am, [e-mail] wrote:

>
I'm not sure exactly what it's called, but this is how it works. I
have one folder containing all the pages that should only be served
over https. In that folder, I have an htaccess file that contains the
following lines:

ok, thx, i will try that!

but i want to confirm, are yo having the same problem, i.e. IE work,
but FF didn't work when just setting using header("Location: ...") ?

[Rik]

On Wed, 06 Jun 2007 19:01:24 +0200, howa <ho******@gmail.comwrote:

On Jun 7, 12:54 am, [e-mail] wrote:

>>
I'm not sure exactly what it's called, but this is how it works. I
have one folder containing all the pages that should only be served
over https. In that folder, I have an htaccess file that contains the
following lines:

ok, thx, i will try that!

but i want to confirm, are yo having the same problem, i.e. IE work,
but FF didn't work when just setting using header("Location: ...") ?

It could very well be a security measure they've implemented (haven't
tested it though). Normally, these are also the browsers that in default
setting will alert you when leaving a secure connection, so it might be
that instead of checking the redirects they require the same or better
security on redirects.
--
Rik Wasmus

[e_matthes]

On Jun 6, 8:01 am, howa <[e-mail]:

On Jun 7, 12:54 am, [e-mail] wrote:

I'm not sure exactly what it's called, but this is how it works. I
have one folder containing all the pages that should only be served
over https. In that folder, I have an htaccess file that contains the
following lines:

ok, thx, i will try that!

but i want to confirm, are yo having the same problem, i.e. IE work,
but FF didn't work when just setting using header("Location: ...") ?

I did not even get far enough with redirects to notice an issue with
IE vs. FF. Redirects worked on FF, but I ended up creating an
"ensureHTTPS" file and "ensureHTTP" file, and including them as
appropriate on all pages. Ugly maintenance when you need to include
one or the other on every page. Two access files took care of
everything. Also, I think php will load the whole page and then
execute the redirect, which is unnecessary work.

[Andy Hassall]

On Wed, 06 Jun 2007 08:53:08 -0700, howa <ho******@gmail.comwrote:

>a page currently in HTTPS, I force the client to redirect to another
page using HTTP under the same domain (e.g. abc.com), i.e.

header("Location: http://www.abc.com/index.php");

IE successfully redirect to HTTP,

but FF & Opera stay on the HTTPS

Works as expected for me; Opera 9.21, Firefox 2.0.0.4, IE 7.

--
Andy Hassall :: an**@andyh.co.uk :: http://www.andyh.co.uk
http://www.andyhsoftware.co.uk/space :: disk and FTP usage analysis tool