/    Sign up×
Community /Pin to ProfileBookmark

Using SSL to Login and Register at a Site

Copy linkTweet thisAlerts:
Jan 19.2007

I’m trying to implement SSL to securely login and/or register for my site. Since my site is hosted on yahoo, whenever I go to SSL I get transferred to one of their secure servers. My problem is that whenever I load my login page on the secure server and then want to go back to a non-secure page like the rest of the site I lose my session. Any tips on how to better transition between being secure and non-secure?

to post a comment
PHP

7 Comments(s) ↴

Copy linkTweet thisAlerts:
@bokehJan 19.2007 — Send the session ID through GET
Copy linkTweet thisAlerts:
@blackhole82authorJan 19.2007 — I also get the message that I'm about to be redirected to a connection that is not secure. My login page sends the form data to another page where the user is authenticated. Next, the user is redirected to the "users area". I guess whenever the redirection occurs is why the message pops up. I'm just wondering how to eliminate that.
Copy linkTweet thisAlerts:
@blackhole82authorJan 19.2007 — [code=php]header("location: ../test/userfunctions.php?".strip_tags(SID));[/code]

I tried sending the SID like this but it didn't work.
Copy linkTweet thisAlerts:
@bokehJan 19.2007 — [code=php]header('Location: https://'.$_SERVER['HTTP_HOST'].htmlentities($_SERVER['PHP_SELF']).'?PHPSESSID='.session_id());[/code]
Copy linkTweet thisAlerts:
@blackhole82authorJan 19.2007 — I'm still getting the I'm about to be redirected to a connection that is not secure message. The passing of the session id did work though. Any thoughts on how to eliminate this message?
Copy linkTweet thisAlerts:
@bokehJan 19.2007 — Any thoughts on how to eliminate this message?[/QUOTE]That message is created by your browser due to its current settings. There is nothing that can be changed to eliminate it except either run the whole site over a secure connection.
Copy linkTweet thisAlerts:
@blackhole82authorJan 19.2007 — I don't want to give the user the wrong idea. Seems like if I go to any other site with a login, that site can login, authenticate, and then move on to the users area without displaying the "redirected to a connection that is not secure message." I'm just wondering what steps do I need to take in between to achieve this same effect.
×

Success!

Help @blackhole82 spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 — BETA 4.29,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @Yussuf4331,
tipped: article
amount: 1000 SATS,

tipper: @darkwebsites540,
tipped: article
amount: 10 SATS,

tipper: @Samric24,
tipped: article
amount: 1000 SATS,
)...