Menu

https support

Help
ggpauly
2010-06-16
2013-05-29
  • ggpauly

    ggpauly - 2010-06-16

    I have a site with an SSL certificate. 

    In configuration  "PhpGedView URL" is set as the https URL.

    Once you've logged in, the site switches from http: to https:

    However, I'd like the login page itself to automatically point to https:

    Is there a setting for this?

     
  • Stephen Arnold

    Stephen Arnold - 2010-06-16

    Not sure why you'd want to encrypt this trivial information and burden the resources with those demands, but you need to set the https URL in your http-conf file so that any request to the non-https url is redirected to the https version. Same as a redirect for a non www url to the one that contains www.  Review instructions for your web server for redirect and alias.

    After doing this, you'll see that attempting to enter the site via any URL other than https is redirected to the https version:
    http://yoursite.com  becomes https:www.yoursite.com
    http://www.yoursite.com  becomes https:www.yoursite.com

    Then you should be able you could remove the URL in the PGV configuration so that it can operate as designed.

    Stephen

     
  • ggpauly

    ggpauly - 2010-06-16

    Stephen,  thanks, your advice will work, but the ideal solution would redirect all login pages to the https URL, so that logged in users would use https and other users http.

    It's very nearly doing this - in fact it may be encrypting the login and password as it is, I'd just like it to be one page sooner so that the login page displays https to assure the user that the login and password will in fact be encrypted.

    A minor issue, I'll look at the code - it may be easy to adjust this.

     
  • Stephen Arnold

    Stephen Arnold - 2010-06-16

    The code references login.php some 97 times in 63 files. Of course some are just language files. I don't know of any way to specify that the https be called to display the login.php page unless the entire site is managed under https or you create a login only site - no visitors, and then specify the https url as the login url.

    there is already some https code in the login.php and in the cms code management files. Perhaps you can hack something there.
    Stephen

     
  • ggpauly

    ggpauly - 2010-07-23

    Solved - This already exists!

    config.php has

    $LOGIN_URL=''; //- the URL to use to go to the login page, use this value if you want to redirect to a different site when users login, useful for switching from http to https

    directly below the $SERVER_URL entry

    Enter something such as https://myfamily.org/login.php

    Works great, already in PGV.

     

Log in to post a comment.