phpesp-devel

[phpesp-dev] [ phpesp-Bugs-730762 ] Can't make surveys secure(https) unless you modify code

[SourceForge.net <no...@so...>]

Bugs item #730762, was opened at 2003-05-01 06:09
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

Category: User
Group: v1.6.1
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Can't make surveys secure(https) unless you modify code

Initial Comment:
I want all of my surveys to be secure (https://) so in my 
phpESP.ini.php i set the base_url to https:

While if I call the survey using a https: the first page is 
secure, but the subsequent pages are not.  To correct this I 
had to modify the handler.php program to change the 
action variable to call a https:// connection

There should one place in the phpesp.ini.php file where you 
can set that the connection is secure for all of your surveys.

Thanks,
Jarrod Karau

jl...@mt...

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

[phpesp-dev] [ phpesp-Bugs-730762 ] Can't make surveys secure(https) unless you modify code

[SourceForge.net <no...@so...>]

Bugs item #730762, was opened at 2003-05-01 23:09
Message generated for change (Comment added) made by angek
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

Category: User
Group: v1.6.1
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
>Assigned to: Kon Angelopoulos (angek)
Summary: Can't make surveys secure(https) unless you modify code

Initial Comment:
I want all of my surveys to be secure (https://) so in my 
phpESP.ini.php i set the base_url to https:

While if I call the survey using a https: the first page is 
secure, but the subsequent pages are not.  To correct this I 
had to modify the handler.php program to change the 
action variable to call a https:// connection

There should one place in the phpesp.ini.php file where you 
can set that the connection is secure for all of your surveys.

Thanks,
Jarrod Karau

jl...@mt...

----------------------------------------------------------------------

>Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 15:59

Message:
Logged In: YES 
user_id=198398

Will look into changing this via a configurable ini variable.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

[phpesp-dev] [ phpesp-Bugs-730762 ] Can't make surveys secure(https) unless you modify code

[SourceForge.net <no...@so...>]

Bugs item #730762, was opened at 2003-05-01 23:09
Message generated for change (Comment added) made by angek
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

Category: User
Group: v1.6.1
>Status: Closed
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Kon Angelopoulos (angek)
Summary: Can't make surveys secure(https) unless you modify code

Initial Comment:
I want all of my surveys to be secure (https://) so in my 
phpESP.ini.php i set the base_url to https:

While if I call the survey using a https: the first page is 
secure, but the subsequent pages are not.  To correct this I 
had to modify the handler.php program to change the 
action variable to call a https:// connection

There should one place in the phpesp.ini.php file where you 
can set that the connection is secure for all of your surveys.

Thanks,
Jarrod Karau

jl...@mt...

----------------------------------------------------------------------

>Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 19:30

Message:
Logged In: YES 
user_id=198398

fixed in CVS

----------------------------------------------------------------------

Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 15:59

Message:
Logged In: YES 
user_id=198398

Will look into changing this via a configurable ini variable.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

[phpesp-dev] [ phpesp-Bugs-730762 ] Can't make surveys secure(https) unless you modify code

[SourceForge.net <no...@so...>]

Bugs item #730762, was opened at 2003-05-01 15:09
Message generated for change (Comment added) made by moixa
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

Category: User
Group: v1.6.1
Status: Closed
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Kon Angelopoulos (angek)
Summary: Can't make surveys secure(https) unless you modify code

Initial Comment:
I want all of my surveys to be secure (https://) so in my 
phpESP.ini.php i set the base_url to https:

While if I call the survey using a https: the first page is 
secure, but the subsequent pages are not.  To correct this I 
had to modify the handler.php program to change the 
action variable to call a https:// connection

There should one place in the phpesp.ini.php file where you 
can set that the connection is secure for all of your surveys.

Thanks,
Jarrod Karau

jl...@mt...

----------------------------------------------------------------------

Comment By: Tobias Sager (moixa)
Date: 2004-05-23 20:25

Message:
Logged In: YES 
user_id=727021

It actually should not be determined by .ini-setting, but by
the way how the page was accessed.
Just do not specify any http or https prefix and let the
server decide.

----------------------------------------------------------------------

Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 11:30

Message:
Logged In: YES 
user_id=198398

fixed in CVS

----------------------------------------------------------------------

Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 07:59

Message:
Logged In: YES 
user_id=198398

Will look into changing this via a configurable ini variable.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

[phpesp-dev] [ phpesp-Bugs-730762 ] Can't make surveys secure(https) unless you modify code

[SourceForge.net <no...@so...>]

Bugs item #730762, was opened at 2003-05-01 15:09
Message generated for change (Comment added) made by moixa
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956

Category: User
Group: v1.6.1
Status: Closed
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Kon Angelopoulos (angek)
Summary: Can't make surveys secure(https) unless you modify code

Initial Comment:
I want all of my surveys to be secure (https://) so in my 
phpESP.ini.php i set the base_url to https:

While if I call the survey using a https: the first page is 
secure, but the subsequent pages are not.  To correct this I 
had to modify the handler.php program to change the 
action variable to call a https:// connection

There should one place in the phpesp.ini.php file where you 
can set that the connection is secure for all of your surveys.

Thanks,
Jarrod Karau

jl...@mt...

----------------------------------------------------------------------

Comment By: Tobias Sager (moixa)
Date: 2004-05-23 20:41

Message:
Logged In: YES 
user_id=727021

These changes work fine for me:

<snip>
--- public/handler.php.org 2004-05-23 20:36:08.500042688 +0200
+++ public/handler.php  2004-05-23 20:26:39.661519288 +0200
@@ -64,7 +64,8 @@
 
        $msg = '';
 
-       $action = 'http://' . $HTTP_SERVER_VARS['HTTP_HOST']
. $HTTP_SERVER_VARS['PHP_SELF'];
+       #$action = 'http://' .
$HTTP_SERVER_VARS['HTTP_HOST'] . $HTTP_SERVER_VARS['PHP_SELF'];
+       $action = $HTTP_SERVER_VARS['PHP_SELF'];
        if (!empty($HTTP_SERVER_VARS['QUERY_STRING']))
                $action .= "?" .
$HTTP_SERVER_VARS['QUERY_STRING'];
 
</snip>

<snip>
--- admin/phpESP.ini.php.org      2004-05-23
20:35:23.554875392 +0200
+++ admin/phpESP.ini.php        2004-05-23
20:24:28.186506528 +0200
@@ -16,7 +16,8 @@
 
 // Base URL for phpESP
 // The string $server['HTTP_HOST'] will be replaced by the
server name
-$ESPCONFIG['base_url'] = 'http://' . $server['HTTP_HOST'] .
'/phpESP/';
+// $ESPCONFIG['base_url'] = 'http://' .
$server['HTTP_HOST'] . '/phpESP/';
+$ESPCONFIG['base_url'] = '/phpESP/';
 
 // URL of the images directory (for <img src='...'> tags)
 $ESPCONFIG['image_url'] = $ESPCONFIG['base_url'] . 'images/';
</snip>


----------------------------------------------------------------------

Comment By: Tobias Sager (moixa)
Date: 2004-05-23 20:25

Message:
Logged In: YES 
user_id=727021

It actually should not be determined by .ini-setting, but by
the way how the page was accessed.
Just do not specify any http or https prefix and let the
server decide.

----------------------------------------------------------------------

Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 11:30

Message:
Logged In: YES 
user_id=198398

fixed in CVS

----------------------------------------------------------------------

Comment By: Kon Angelopoulos (angek)
Date: 2004-05-12 07:59

Message:
Logged In: YES 
user_id=198398

Will look into changing this via a configurable ini variable.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=730762&group_id=8956