[horde] SSL on horde login page
pete
pkarttun at siba.fi
Fri May 14 14:09:41 PDT 2004
Hi!
Is there a reason why an ssl-connection is not forced on the login page even
when $conf['use_ssl'] is set to 2 (or 1)? If i don't put something like:
if (!$browser->usingSSLconnection() && $conf['use_ssl'] > 0) {
header('Location: https://' . $_SERVER['SERVER_NAME'] . $_SERVER
['PHP_SELF']);
}
on the top of the login page, the authentication itself will be done through an
unencrypted http-connection. The connection is changed to https thereafter.
:pete
More information about the horde
mailing list