This is a discussion on Re: Redirection for SSL only authentication within the Apache Web Server forums, part of the Web Server and Related Forums category; Hi, I had somthing simular: in my .htaccess i had: ------------- RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule .* https://%{HTTP_HOST}:443%{REQUEST_URI} [...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
I had somthing simular: in my .htaccess i had: ------------- RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule .* https://%{HTTP_HOST}:443%{REQUEST_URI} [QSA,R=permanent,L] -------------- this schould rewrite the e.g. http://myserver/myfsite/download/private/ to https://http://myserver/myfsite/download/private/ if you place the ..htacces file in the private folder(tested on windows xp pro with apache 2.0.48) ~Jorge |
|
|||
|
"Jorge Schrauwen" <jorge.schrauwen@gmail.com> wrote in message
news:cc330m$80h@odah37.prod.google.com... > Hi, > I had somthing simular: > in my .htaccess i had: > ------------- > RewriteEngine On > RewriteCond %{SERVER_PORT} 80 > RewriteRule .* https://%{HTTP_HOST}:443%{REQUEST_URI} > [QSA,R=permanent,L] > -------------- Thanks, but i've already got the redirection part sorted out. What I want is some way to prevent it trying to authenticate till _after_ it redirects while still having all the configuration in a single .htaccess file. Currently it will authenticate to do the redirect and then again when its redirected to the secure location so the credentials are passed in cleartext on the first authentication. --- Alex |