https, and phpbb

hey everyone!

figured I would ask this here first being I know and trust the people here.

I have a website, and I run it through https. I have forums on the site.. although sometimes while browsing through the forums you are transfered from https to http...

I want the connection to remain encrypted the entire time, so I was wondering if I could write a program that would transfer you to the encrypted https standard and keep you there through the entire session.

so you connect to the site, and at that point you are moved to an encrypted connection. From there, you are encrypted until you leave the site or end your session.

If so, could I do this in PHP, that is a language I know the most.


my site is https://blockthis.org

If you have any questions or are confused please ask me, I know that probably isn't the best description of my problem

thanks for your time guys!

mod_rewrite?

I am not very familiar with PHP but in ASP once you are in secure mode (by specifying https://...) you will stay in secure mode as long as you do not go to a link that starts with http://....

I just tested this in ASP on a 2K3 box with IIS6.

You should set up a separate virtual host on the HTTP site, and simply configure it with a redirect to the HTTPS site.

For example, if you were using Apache,

Code:

---

<VirtualHost *:80>
  ServerName your.server.dns.name
  Redirect permanent / https://your.server.dns.name/
</VirtualHost>

<VirtualHost whatever:443>
  # Some SSL directives...
  DocumentRoot /wherever
</VirtualHost>

---

You get the drift?

Mark

As mmelby says, there's probably a link somewhere pointing to http:// instead of https://

i know there is SirDice, thats what I want to change

say for instance you post a message.. you were logged in via https... well when it redirects you back to the thread you just started, you are now in http... no longer secure

I was looking for a way to either make phpbb secure every step of the way, or run php through a session, and that session be secure the entire time

Grep through the source, it's there somewhere. Take care of the problem not circumvent the symptoms.