FUDforum: How To » How-to: https for login operations only

Home » FUDforum » How To » How-to: https for login operations only

Show: Today's Messages :: Polls :: Message Navigator

How-to: https for login operations only [message #165286]

Fri, 20 May 2011 15:02

eclipsewebmaster

Messages: 46
Registered: November 2009
Location: Ottawa, Ontario, Canada

Karma: 0

Member

If you want your forum to operate on http, but automatically switch to https for the login process, here's what you can do. This is based on forum 3.0.2 using the default template and the LDAP plugin to authenticate but it should work with the standard auth.

Add this to your Apache config:
# https for forums
Rewritecond %{HTTPS} (?!on).*
Rewritecond %{THE_REQUEST} ^[A-Z]{3,9}\ /forums/index.php\?t=login
RewriteRule ^/(.*) https://www.example.com/$1 [L,R]

In FUDforum/thm/default/tmpl/header.tmpl, delete these two lines.
17:<base href="{FULL_ROOT}" />
52:<base href="{FULL_ROOT}" />

Rebuild your template and voila.

Report message to a moderator