Posted by Jerry Stuckle on 06/02/07 11:56

Iván Sánchez Ortega wrote:
> Jerry Stuckle wrote:
>
>> My response was just directed at Ivan's comment that you should serve
>> different pages to http and https protocols. I see no reason why you
>> should do that.
>
> I meant that, if you have to be really sure that a certain page is served
> *only* by https, then the best option IMHO is to configure two virtualhosts
> in the webserver; then put the https-only webpage in the https-only
> virtualhost.
>

No, no need at all to create an entire new virtual host. It's quite
easy to check the $_SERVER to see if they're running https, and if not,
redirect them.

Even easier is to just put a rule in your current httpd.conf of
..htaccess file to redirect any non-https request for the page to https.

An additional virtual host is way overkill.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]