-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How about simply disallowing access if it isn't an https connection? I don't have the recipe in front of me but I could post it later if folks are interested. I use it on the webserver at work. Tom Penney wrote: | Hello all, | | This seems like a simple problem but I can not seem to come up with a | simple answer. | | I have a php app which is working fine. I have ssl working. I can | currently access any part of this app using either http port 80 or https | port 443. What I want to do is force everything to run encrypted over | https. | | A little googleing points me to mod_rewrite. I am not an apache guru. In | my quest for a quick easy lazy mans fix I cut and past this into my | httpd.conf file. | | <Directory /path/to/my/app> | RewriteEngine on | RewriteCond %{SERVER_PORT} !^443$ | RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L] | </Directory> | | This does not seems to do anything. I find no errors in any logs. Can | anyone point me in the right direction? Is Rewrite the only way to | accomplish this? if so what is wrong with this rewrite rule? | | Thanks, | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFAdgcW8/QSptFdBtURAvVKAJ4jAAetjdEvHtULQEKGGFLSNPb2EgCggipn llVTY/pWwAxmAojjZS6uaK0= =IUFv -----END PGP SIGNATURE----- _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list