[horde] SSL on horde login page

pete pkarttun at siba.fi
Fri May 14 14:09:41 PDT 2004


Hi!

Is there a reason why an ssl-connection is not forced on the login page even 
when $conf['use_ssl'] is set to 2 (or 1)? If i don't put something like:


if (!$browser->usingSSLconnection() && $conf['use_ssl'] > 0) {
        header('Location: https://' .  $_SERVER['SERVER_NAME'] . $_SERVER
['PHP_SELF']);
}

on the top of the login page, the authentication itself will be done through an 
unencrypted http-connection. The connection is changed to https thereafter.


:pete





More information about the horde mailing list