Re: Detecting SSL or port

This WebDNA talk-list message is from

2005


It keeps the original formatting.
numero = 60956
interpreted = N
texte = Morten Madsen wrote: > I want to make sure that the customers have a secure connection during > checkout. In ASP it is very easy to get information about which port the > client is using on the server (Request.ServerVariables("SERVER_PORT")), > PSEUDO: if the port = 80 redirect to HTTPS://rightside - if it is 443 do > nothing. One easy way to do it is to require SSL for a specific URL on the server (this is commonly available on all web servers I have experience with) and then place your checkout files in that directory only. Then you "know" that the only time someone can access that file is via SSL and you are safe. FWIW, we switch to SSL automatically during the checkout phase (when they click the "Check Out" button but before they start keying in their information). If the user wants to go back and change the URL to be insecure, that is their problem, not mine. It would be nice in general to be able to retrieve the CGI environment variables from within WebDNA (that is what ASP's ServerVariables method is reporting). HTH John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: Detecting SSL or port ( "Morten Madsen" 2005)
  2. Re: Detecting SSL or port ( John Peacock 2005)
  3. Re: Detecting SSL or port ( Donovan Brooke 2005)
  4. Detecting SSL or port ( "Morten Madsen" 2005)
Morten Madsen wrote: > I want to make sure that the customers have a secure connection during > checkout. In ASP it is very easy to get information about which port the > client is using on the server (Request.ServerVariables("SERVER_PORT")), > PSEUDO: if the port = 80 redirect to HTTPS://rightside - if it is 443 do > nothing. One easy way to do it is to require SSL for a specific URL on the server (this is commonly available on all web servers I have experience with) and then place your checkout files in that directory only. Then you "know" that the only time someone can access that file is via SSL and you are safe. FWIW, we switch to SSL automatically during the checkout phase (when they click the "Check Out" button but before they start keying in their information). If the user wants to go back and change the URL to be insecure, that is their problem, not mine. It would be nice in general to be able to retrieve the CGI environment variables from within WebDNA (that is what ASP's ServerVariables method is reporting). HTH John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ John Peacock

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Non-WebDNA Sites Reporting Errors When WebDNA Isn't Running (2006) Sendmail and Formvariables (2000) [ShowNext] feature in 2.0 (1997) Where's Cart Created ? (1997) encryption madness (2003) Explorer 3.0 (1997) More Applescript (1997) Trouble Searching (1999) Multiple security dbs (1997) Update quantity (2000) Extra carriage returns (1999) WebCatalog Use Question (1997) Postprocessing CCs (2000) WCf2 and nested tags (1997) Not reading code (1997) Version Question (2000) Dummy Credit Card Number for debug? (1997) Forumulas.db & Variables (2002) Stopping bad HTML propagation ? (1997) supressing math results (1997)