how to prevent ssl??

[mojo3120]

Is there any way I can redirect certain pages from https to http without hard coding all my links? I think a lot of people are going to the checkout page on our shopping cart (which is https), then clicking on another link and getting stuck in https the rest of the time their browsing. If you go to https://www.google.com it automatically redirects you to a non ssl page. Anyone know how to do this? Site is on classic asp if it matters.

Thanks
-Andrew

[Terrorke]

You can check if your user is on https or not with

Request.ServerVariables("HTTPS")

It will return on or off.


If it is and it shouldn't be, just redirect your user to the http.
The redirect will only been done once, because your user will be on http for then on.

[mojo3120]

You can check if your user is on https or not with

Request.ServerVariables("HTTPS")

It will return on or off.


If it is and it shouldn't be, just redirect your user to the http.
The redirect will only been done once, because your user will be on http for then on.

Ah...so

pUrl=Request.ServerVariables("url")
if Request.ServerVariables("HTTPS")="on" and pUrl<>"/sslpage.asp" then
response.redirect("http://www.mysite.com"&pUrl)
end if

seems to do the trick

Thanks!
-Andrew

[mojo3120]

I almost forgot querystrings

pUrl=request.servervariables("url")
pStrings=request.ServerVariables("QUERY_STRING")
if Request.ServerVariables("HTTPS")="on" and pUrl<>"/sslpage.asp" then
response.redirect "http://www.mysite.com"&pUrl&"?"&pStrings
end if

[vanny]

Does this work in reverse as well, eg they got to a site that should be SSL and forgot the "s"???

Im very interesting in it.

[Terrorke]

Yep you can also do it in the reverse way.

mojo3120,

Make sure you have all the querystring variables.
you can also use request.servervariables("QUERY_STRING") to get the complete string following the question mark (?)

This way you are sure you have all the variables.

[russell_g_1]

to do it the other way around when the "ssl required" box is checked in IIS you need to write a custom error page and set it up for your website/virtual directory.

[vanny]

Thanks, I might have to have a play with this.

Could solve a lot of my problems when people miss advertise a URL