how to check if the visitor is using https using php ?

graziano1968 · 11-10-2004, 03:19 AM

Hello

I am building an ecommerce order page using https .
I am worried because someone could call the pages using http instead of https.

How to check if the visitor is really using https using php or javascript (and automatically redirect him to the same page using https) ?

Thank you
Graziano

Cedrik · 11-10-2004, 03:54 AM

The best way IMHO is to declare https virtual host in a separate directory then the one for the http
virtual host, of course if you don't have access to httpd.conf, it is another story...

You could use something like :

PHP Code:



if( $_SERVER["SERVER_PORT"] != 443 ) { 
    $url = "https://".$_SERVER["HTTP_HOST"]."/".$_SERVER["REQUEST_URI"]; 
    header("Location: $url"); 
}

graziano1968 · 11-10-2004, 10:10 AM

thanks a lot !

Hko · 11-10-2004, 02:55 PM

A slightly different way:

PHP Code:



if ($_SERVER['HTTPS']!="on") { 
    $url = "https://".$_SERVER["HTTP_HOST"]."/".$_SERVER["REQUEST_URI"]; 
    header("Location: $url"); 
    exit; 
}