Home »
FUDforum »
How To »
How-to: https for login operations only
How-to: https for login operations only [message #165286] |
Fri, 20 May 2011 15:02 |
eclipsewebmaster
Messages: 46 Registered: November 2009 Location: Ottawa, Ontario, Canada
Karma: 0
|
Member |
|
|
If you want your forum to operate on http, but automatically switch to https for the login process, here's what you can do. This is based on forum 3.0.2 using the default template and the LDAP plugin to authenticate but it should work with the standard auth.
Add this to your Apache config:
# https for forums
Rewritecond %{HTTPS} (?!on).*
Rewritecond %{THE_REQUEST} ^[A-Z]{3,9}\ /forums/index.php\?t=login
RewriteRule ^/(.*) https://www.example.com/$1 [L,R]
In FUDforum/thm/default/tmpl/header.tmpl, delete these two lines.
17:<base href="{FULL_ROOT}" />
52:<base href="{FULL_ROOT}" />
Rebuild your template and voila.
|
|
|
|
Goto Forum:
Current Time: Thu Oct 31 23:22:06 GMT 2024
Total time taken to generate the page: 0.02462 seconds