wrote:
>
> Apps running on Heroku can be requested via HTTPS even though the app and
> Web server don't know anything about it. Apps behind CloudFlare have a
> similar option.
>
> In this environment, DebugKit may be blocked as "mixed content" because
> the
Apps running on Heroku can be requested via HTTPS even though the app and
Web server don't know anything about it. Apps behind CloudFlare have a
similar option.
In this environment, DebugKit may be blocked as "mixed content" because the
request for it happens via HTTP. My brow
but not the other pages.
> How can I achieve that?
>
> RewriteEngine On
> RewriteCond %{HTTPS} off
> RewriteRule (.*) https://..
>
Back in the days of CakePHP 1.3, I did something similar by adding the
following code in my controllers beforeFilter() function.
I be
In my config file I have created two VirtualHosts. Below is the config that
redirects to 443 where everything is configured and working. Now I want to
make the startpage reachable without ssl but not the other pages. How can I
achieve that?
RewriteEngine On
RewriteCond %{HTTPS} off
I Tried to find on docs, forum search and everything else.
I have an aplication that the user logs with a email and a access key.
It works nice and clean. BUT, another version of my app was demanded to run
inside a Iframe:
https inside a https. Its was a sales demand, not my decison.
Now i
We have found the solution, after sending user credentials the login action
was redirecting to users/index, that first redirect keeps the https
protocol, but then in the index action we have some business logic to check
the type of user and based on that redirecting to the index action of
This log does not look to show a redirect changing protocols. it shows,
what looks like, two parallel/subsequent requests to /users on https and
http. the last request shown doesn't originate from the request before it
and has no referer.
If relevant, check what is stored in the sessi
e server and doing
> some tests with our app running over https. The very first issue is that
> after login we are being redirected to http, and not https, here are some
> apache logs:
>
> xxx.xxx.com:443 192.168.1.3 - - [21/Nov/2013:12:45:24 -0800] "POST
> /users/login HTT
We have just installed a self signed ssl cert on the apache server and
doing some tests with our app running over https. The very first issue is
that after login we are being redirected to http, and not https, here are
some apache logs:
xxx.xxx.com:443 192.168.1.3 - - [21/Nov/2013:12:45:24
roblem
> that i am facing is redirection from http to https works fine on my local
> machine ,
> but when i deploy it on the server and tried to redirect , the session
> expires and again asking to loigin , please reply asap is anybody knows the
> solution .
>
> Thanks in adv
Hi ,
I have implemented ssl on my local and on the server , the problem
that i am facing is redirection from http to https works fine on my local
machine ,
but when i deploy it on the server and tried to redirect , the session
expires and again asking to loigin , please reply asap is
Thanks.. i will see about the certificates.
On Tuesday, April 10, 2012 3:41:25 PM UTC-6, euromark wrote:
>
> for starters the protocol (http or https) doesnt necessarily have to do
> with cake.
> your application will run with both versions - you can switch easily
> between them.
for starters the protocol (http or https) doesnt necessarily have to do
with cake.
your application will run with both versions - you can switch easily
between them.
you should first consult on how to install and setup the certificates, how
to make your apache route the https connection.
if
Hello everyone, i want to use https in cakephp how can i use that? do i
need to use some security component? or do i need to change the route.php??
Thanks in advance.
--
Our newest site for the community: CakePHP Video Tutorials
http://tv.cakephp.org
Check out the new CakePHP Questions site
time
> (as you did here^^)
>
>
> On 31 Jan., 04:38, Perry wrote:
> > when I pass a https url to HttpSocket::get, it won't use 443 port
> > automatically, and return nothing
> >
> > but when i specify the port in url, likehttps://example.com:443/, it
>
could be
you can open a ticket at
cakephp.lighthouseapp.com/projects/42648/tickets/
if you feel like this should be addressed
but dont forget to mention the cake version you are using this time
(as you did here^^)
On 31 Jan., 04:38, Perry wrote:
> when I pass a https url to HttpSocket::get,
when I pass a https url to HttpSocket::get, it won't use 443 port
automatically, and return nothing
but when i specify the port in url, like https://example.com:443/, it works
fine
is this a bug?
--
Perry | 彭琪
http://pengqi.me
--
Our newest site for the community: CakePHP Video Tuto
have just added to a fully working site based on CakePHP 2.0 and
> Apache 2.2.16 a wildcard SSL certificate. Created virtual hosts
> pointing HTTPS to the same HTTP app.
>
> But when I load the HTTPS version, the certificate is ok but lots of
> errors: first thing
> [Mon Dec 19 16:
Hi all,
I have just added to a fully working site based on CakePHP 2.0 and
Apache 2.2.16 a wildcard SSL certificate. Created virtual hosts
pointing HTTPS to the same HTTP app.
But when I load the HTTPS version, the certificate is ok but lots of
errors: first thing
[Mon Dec 19 16:34:57 2011
I think its going to be difficult for anyone to give you specific
help. Without knowing the exact details of yours and the payment
system involved.
I think being on HTTPS can affect the way sessions are handled. One
issue I know of is that, dependant on settings, a cookie set by HTTPS,
must only
Still looking for your valued response.
Lets brainstorm to have right solution.
Is this a Session issues ?
but it is working fine when the site is worked on http://sitename.com.
But it gives problem when i get response back from payment page.
cheers
--
Our newest site for the community: CakePH
wever, it is not working with HTTPS://sitename.com.
Once the payment is done, then, instead of going back to the payment
confirmation page it is directly bouncing back to the login page.
What could be the error / issues right here ?
Is it the issue of handing HTTP and HTTPS on cakephp ?
your
The line
RewriteCond %{SERVER_PORT} !^80$
seems to indicate that your RewriteRule's are only applied if the
incoming request is NOT coming in from port 80 (port 80 is usually the
http:// port, while port 443 is usually the https:// port). The "!"
negates the pattern, so I thi
It sounds like what he's trying to do (or at least, what the snippet of rewrite
rule he posted is supposed to do) is require the site be accessed only via
https; if the site is accessed via http it would redirect to the corresponding
https URL.
On Jan 23, 2011, at 17:58, Andras Kende
The default .htaccess works fine for https site
What re ou trying to do ?
Andras Kende
http://www.kende.com
On Jan 23, 2011, at 3:22 PM, heh wrote:
> Hi,
> Noob user here.
> Can anyone guide me to an example of .htaccess setting for htts site?
> this is the default that cake h
%{SERVER_PORT} !^80$
RewriteRule^$ https://localhost/sticker/app/webroot/[L]
RewriteRule(.*) https://localhost/sticker/app/webroot/$1 [L]
but the rewrite seems not working.
Thanks
--
Our newest site for the community: CakePHP Video Tutorials
http://tv.cakephp.org
Check out the
Thats another option, and by doing that you don't have to touch the
core code, I will take a look at it before upgrading to 1.3.5...
On 24 oct, 14:23, odd wrote:
> dtemes schrieb:
>
> > I tryed with a custom save handler, but then i moved to database
> > driver sessions, so finally I decided to
dtemes schrieb:
> I tryed with a custom save handler, but then i moved to database
> driver sessions, so finally I decided to touch the cake core code
> and set session.cookie_secure to 0, I am not really fond of this kind
> of solutions and would prefer a way to set it up from a config file
> wit
I tryed with a custom save handler, but then i moved to database
driver sessions, so finally I decided to touch the cake core code
and set session.cookie_secure to 0, I am not really fond of this kind
of solutions and would prefer a way to set it up from a config file
without having to change the
Maybe the "session.cookie_secure" option is set to true/1 by default
in your PHP configuration (see php.ini), so uncommenting that line in
cakes session class wont have any effect. Or maybe you have some PHP
extension installed that automatically chooses to secure the cookie.
Instead of uncommenti
I can see lots of activity on this subject, but no clear working
answer; so excuse me if it's a broken record.
My users log in via an https page. They are logged in and the Auth
session variable is set. If they now go to an http page I would expect
them to still be logged in, but they are no
http://myapp/signup
which works really nice. When I click a link in an email or so the
route just works fine, calls the correct action and so on...
But when using SSL encryption on my production server, the route
becomes this:
https://myapp/signup
This should not be a problem, BUT from this poi
Lorenzo Bettini wrote:
Hi
I'd like to access my cakephp based web site also using https, but I
always get an error saying that the requested url is not found on the
server.
Note that apache is configured to serve also https requests and it works
with other pages...
is there anything t
:
>>
>>>if (in_array($this->params['action'], $action)):
>>>$this->Security->blackHoleCallback = 'forceSSL';
>>>$this->Security->requireSecure();
>>>else:
>>>$this->Security->bl
Hi, having a strange problem with the server config it would appear.
(My code works fine on another host, but unfortunalty I need to make
this work where it is now!)
I am using cakePHP Httpsocket class. The app is on https:// and the
URL I am POST'ing to is also https://.
If I use the same
This should get you started:
http://book.cakephp.org/view/268/Usage
This works in 1.2 and 1.3 - I can't confirm that the same for 1.1 though.
Jeremy Burns
On 1 Mar 2010, at 04:28, SeeVik wrote:
> Hello all
>
> I am using Cakephp 1.1 for my webapp and I want to use https when t
Hello all
I am using Cakephp 1.1 for my webapp and I want to use https when the
user logs in his user account. For guest users I want the simple http
connection to be used.
Can this be done by using some setting in cakephp or should it be set
it in Apache configuration?
Thanks and Regards
I like it!
Check out the new CakePHP Questions site http://cakeqs.org and help others with
their CakePHP related questions.
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe fr
> else:
> > $this->Security->blackHoleCallback = 'unforceSSL';
> > endif;
>
> > I have these two functions in app_controller:
>
> > function forceSSL() {
>
> > $this->redirect('https://' . env('S
When I've done this, I usually set specific controllers/actions as
$useSSL=true; and force everything else back to non-SSL
app_controller.php:beforeFilter
...
$this->ishttps = $this->set('ishttps',((isset($_SERVER['HTTPS']) &&
$_SERVER['HT
gt;>>if (in_array($this->params['action'], $action)):
>>>$this->Security->blackHoleCallback = 'forceSSL';
>>>$this->Security->requireSecure();
>>>else:
>>>$this->Security-
e:
> > $this->Security->blackHoleCallback = 'unforceSSL';
> > endif;
>
> > I have these two functions in app_controller:
>
> > function forceSSL() {
>
> > $this->redirect('https://' . env('SERVER_NAM
gt;
> I have these two functions in app_controller:
>
> function forceSSL() {
>
> $this->redirect('https://' . env('SERVER_NAME') . $this->here);
>
> }
>
> function unforceSSL() {
>
> $this->redirect('http
y->requireSecure();
else:
$this->Security->blackHoleCallback = 'unforceSSL';
endif;
I have these two functions in app_controller:
function forceSSL() {
$this->redirect('https://' . env('
Hi
I'd like to access my cakephp based web site also using https, but I
always get an error saying that the requested url is not found on the
server.
Note that apache is configured to serve also https requests and it works
with other pages...
is there anything to set somewhere?
than
Hi
I'd like to access my cakephp based web site also using https, but I
always get an error saying that the requested url is not found on the
server.
Note that apache is configured to serve also https requests and it works
with other pages...
is there anything to set somewhere?
than
on Solaris 10 with apcahe and php is configured.
> I have my website placed at /var/apache/htdocs/index.html as document root.
> and i access it on local apache server.
>
> Now i want to shift it on https to secure it from other systems on LAN.
>
> what steps i should take to implemen
Hi i am working on Solaris 10 with apcahe and php is configured.
I have my website placed at /var/apache/htdocs/index.html as document root.
and i access it on local apache server.
Now i want to shift it on https to secure it from other systems on LAN.
what steps i should take to implement
t;
> Val
>
> On Aug 17, 12:12 pm, brian wrote:
>
> > Use https for the redirect, also. Either that, or redesign your app so
> > you don't require thesessionvars in the other view. Are you doing
> > this to save doing a find() in the "view" view?
>
>
thing works. Is this some kind of a security thing?
Val
On Aug 17, 12:12 pm, brian wrote:
> Use https for the redirect, also. Either that, or redesign your app so
> you don't require the session vars in the other view. Are you doing
> this to save doing a find() in the "view&q
Use https for the redirect, also. Either that, or redesign your app so
you don't require the session vars in the other view. Are you doing
this to save doing a find() in the "view" view?
On Mon, Aug 17, 2009 at 10:22 AM, vb13 wrote:
>
> I have a User Edit page that submits
I have a User Edit page that submits data over https /user/edit. The
controller saves data and redirects via http to /user/view.
In the process I use php session to read/write some data. If I access
session data using Cake Session component, I loose my session. As a
result I get redirected to a
There is no code you need to change to get ssl working with cakephp. Make
sure you have ssl setup on the site correctly with just static files first.
Cheers,
Adam
- Original Message -
From: "rakesh singh"
To: "CakePHP"
Sent: Wednesday, June 17, 2009 8:43 PM
Sub
hican anyone explain me how to use https in cakephp as i m
having a problem in my project
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email t
On Jun 1, 7:30 pm, Pablo wrote:
> Did anybody see this before? Any clue?
Using HTTP or HTTPS should be the same to Cake. There must be a
difference between the configurations on the server. It could look
like your .htaccess file is not interpreted with the HTTPS-settings.
Rega
Hello everyone,
This morning a system guy just configured apache2 to work with https.
I hoped that everty URL of my cakephp application would work also with
https protocol but ...
http://192.168.1.242/pacex/alta-pacientes
works perfectly and
https://192.168.1.242/pacex/alta-pacientes
returns
't do for our needs.
The "easy" solution I see is to update each link in each view that
accesses a secure page so that it uses a fully qualified URI with the
https protocol applied. That will also require that fully qualified
URIs are applied to all links _on_ secure pages that targ
Hi Robert,
>
> I've never done what you have done, but I'm sure it's possible because
> most people do shopping carts this way.
>
> The problem might be that Cake is switching to secure cookies when it
> finds the current URL is using HTTPS. The cookie is used to sto
Hi Robert,
I've never done what you have done, but I'm sure it's possible because
most people do shopping carts this way.
The problem might be that Cake is switching to secure cookies when it
finds the current URL is using HTTPS. The cookie is used to store the
session ID and whe
Hi Jipson,
I'm not sure exactly but I think you can define the protocol to the
router in cake like this.
url(array('base'=>'https://','url'=>'/carts/authorize'));?>
You can also do this with cake controllers.
url(array
('base
ll need to include the full path to the secure URL,
> like this:
> url('https://mycart/carts/authorize/);?>
> in order to force the HTTPS protocol.
>
> Out of curiosity, why are you using $html->url instead of $html->link?
--~--~-~--~~~---~
> i want to get ishttps://mycart/carts/authorize/, what i have to do for it
Hi Jipson,
Most likely you'll need to include the full path to the secure URL,
like this:
url('https://mycart/carts/authorize/); ?>
in order to force the HTTPS protocol.
Out of curiosity, why are
hi, I am using cakephp rc3
I will lose my cakephp session whenever i swtich http to https: or
https to http
anyone knows how to solve this problem, reason being, the user was
adding to the shopping cart, but when the protocol changes from http
to https for checkout:, the shopping cart session
Hi Friends,
In my project i am giving the links to payment page view as
follows.
url('/carts/authorize/); ?>
now i am getting the output url as http://mycart/carts/authorize/ what
i want to get is
https://mycart/carts/authorize/ , what i have to do for it,
anybody please
{
if($arySSL['controller'] ==
$this->_getConfig('controller') &&
$arySSL['action'] == $this->_getConfig('action')){
$bolForced = true;
}elseif($arySSL['controller
Hi Daniel,
> I managed to get my component working but would like to call cake's
> native 'redirect' instead of "header('location...", if it is
> possible... Does anyone know how this can be done?
Store a reference of the controller (which is automatically passed as
parameter to the initialize()
Hello All,
I managed to get my component working but would like to call cake's
native 'redirect' instead of "header('location...", if it is
possible... Does anyone know how this can be done?
~/app/app_controller.php:
SSL->reset=false;//requests continue i
What I would love to be able to do is something like this:
$html->link('login', '/users/login', array('secure'=>TRUE) );
Depending on which server I was on, this would generate either:
https://www.cakephp.org/users/login
OR
https://cakephp.localhost/us
hi, any suggestion on how to solve this problem.
because whenever I redirect to a https connection for payment like
from http://www.domain.com/checkout to https://www.domain.com/checkout
the session is lost. Thank you
On May 31, 5:38 pm, "Dr. Tarique Sani" <[EMAIL PROTECTED]>
On Sat, May 31, 2008 at 3:06 PM, robert123 <[EMAIL PROTECTED]> wrote:
>
> anyone knows why cakephp session is gone when it is redirect from http
> to https:
This is not CakePHP specific - http <> https - will happen with
anyone knows why cakephp session is gone when it is redirect from http
to https:
Thank you
www.generics.ws
www.genericsmed.com
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to
You have to set a RewriteCond on myaccount after the rule on the HTTPS
port.
Check on Apache, I am sure there are plenty of sample to combine to
condition for a rule.
hth
On Feb 13, 11:07 pm, Hoddy <[EMAIL PROTECTED]> wrote:
> cake1.1, apache1.3
>
> Hi
>
> could anyone ple
cake1.1, apache1.3
Hi
could anyone please shed any light on using htaccess to force a
section of the site (ie myaccount) to use https.
The problem is that ALL requests get redirected to HTTPS instead of
just those to /myaccount/*
My htaccess in root dir looks like:
RewriteEngine On
Well, I did a commercial site with http/https switching a while ago,
but it wasn't in Cake..
>From my experience, even though the SSL does bring a slight overhead,
it is actually unnoticeable. What we did was mod_overwrite redirection
in apache, like this:
RewriteRule (.*/secure/.
suggestions, anyone?
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For
In my appController I plan to check if a secure controller/action is
being referred to, and if so, redirect to https (assuming we are not
already https).
Similiarly, if a nonsecure controller/action is being referred to
(excluding webroot), I plan to redirect to http (assuming we are not
already
I have a cakephp 1.2 app that moves to https during credit card
transactions. When it does all session data is gone. I have
researched this issue with php and have found different answers as to
session behavior when changing to an SSL url.
Session work is new for me. I have read the cake
Is the apache DocumentRoot of HTTP the realy the same as for HTTPS?
See httpd.conf and the ???ssl???.conf
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake
PHP" group.
To post to this group, send ema
Found a thread similar to your problem:
http://www.webhostingtalk.com/archive/index.php/t-373698.html,
they mention to run the easyapache or buildapache script...
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake
It turned out to be a slightly corrupted installation of apache. I had
compiled mod_rewrite into the apache ssl engine, but then had also
loaded the mod_rewrite.so library. Getting rid of the latter fixed the
problem
Thanks for the help,
Jay
On Nov 27, 8:13 pm, "Samuel DeVore" <[EMAIL PROTECTED
work well too.
But when I view it using https, the the style of welcome message
didn't show.
When I try on https://localhost/cake/welcome I get "Missing
controller" error message. It seems like mod_rewrite
didn't working in secure connection. Anyone can give me some hint or
h
On Nov 27, 2007 5:35 PM, jaymon <[EMAIL PROTECTED]> wrote:
>
> Would the port mapping for the allow_override rule always live in
> the .htaccess file or is possible that it is somewhere else?
>
With my problem it was in the httpd.conf files that the ports and
allow override issues were taking pla
Would the port mapping for the allow_override rule always live in
the .htaccess file or is possible that it is somewhere else?
On Nov 27, 1:59 pm, "Samuel DeVore" <[EMAIL PROTECTED]> wrote:
> I'vehad that problem when my allow override rule was tied to the port
> (80) and was not set for thehttp
I'vehad that problem when my allow override rule was tied to the port
(80) and was not set for the https port (443) it was a funky apache
issue for me. I have also had a server where two totally different
instances of apache handled http and https and had different configs
On Nov 27, 20
On Nov 27, 2007 11:45 AM, jaymon <[EMAIL PROTECTED]> wrote:
>
> I can't seem to get Cake to work over https. I have my project working
> fine over http so I know that the code is good. But when I try to run
> it from my https server it can't find "/home" (The
Does anyone have a good example or concept of how someone might easily
enable/disable caching based on if HTTPS is enabled/disabled? Another option
in my mind might be an extension to the Caching mechanism that caches the
HTTPS objects seperately from HTTP.
The reason I need this is the links
I can't seem to get Cake to work over https. I have my project working
fine over http so I know that the code is good. But when I try to run
it from my https server it can't find "/home" (The requested URL /
home/ was not found on this server.). Additionally when my server
sta
Your question needs a little more information to get any kind of
useful answer. Is this css in a separate style sheet, or embedded
directly in the view. Did you put the sytel sheet in the webroot/css
directory or elsewhere? Are you using a helper? How are you
referencing the filename. Etc. e
I'm sry for spamming the list.
The problem had nothing to do with CakePHP but it was a
misconfiguration of Apache-SSL.
Somehow i was browsing with https url and got the "Accept the
certificate" popup but the actual traffic was http not https... very
weird.
Anyway some tingling w
My app runs on a server that only runs https no http. When i do a:
$this->redirect('controller/action', null, true);
The created url is:
http://cake.devenvironment.local/controller/action/
The obvious error is that the 's' is missing on the url, what am i
doing wron
Most definitely, like I said not the best practice solution - and of
course all secure submissions etc should of course be from a secure form
which will just naturally posted to the current (HTTPS) path without a
redirect.
-Original Message-
From: cake-php@googlegroups.com [mailto
2007/4/20, Paul Webster <[EMAIL PROTECTED]>:
> Like I said, this may not be the "best practice" way to do it, but to me
> it did it good enough given the situation I was addressing. Criticism
> and feedback most welcome.
With that solution, you might experience browser security warnings
when post
two lines to do most of
the magic for me (this is not complete but these are the lines that do
it):
RewriteRule ^secure/(.*)$ https://domain.com/$1 [QSA,L]
RewriteRule ^ns/(.*)$ http://domain.com/$1 [QSA,L]
When I want to go to a secure econnection
I call my link
http://domain.com/secure
I did this some months ago:
http://groups.google.com/group/cake-php/browse_thread/thread/f603fbcad492144
f
But in your case if you are redirecting them to HTTPS then Cake will keep
that since its links do not include http:// portion.
-MI
Upon login, I'd like to send a user to a HTTPS url for a secure
connection. All subsequent links around the site need to maintain
this. How is this accomplished in cake?
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the G
I have a site where some sections are accessed via HTTPS ( login,
> payments ) while the rest is accesses via HTTP. Currently I have a
> problem where I get a different session data for each protocol.
>
> On my windows development environment everything works fine - when
> using eithe
I have a site where some sections are accessed via HTTPS ( login,
payments ) while the rest is accesses via HTTP. Currently I have a
problem where I get a different session data for each protocol.
On my windows development environment everything works fine - when
using either HTTPS or HTTP cake
through HTTPS. So in boostrap.php I added:
$GLOBALS['AppConfig'] = array(
'SSLActions' => array (
'account/*'
)
);
This means that any action within the account controler must be
accessed through SSL.
Then, I had to extend the Html hel
rc' => $this->webroot .
'img/icons/login.jpg')); ?>link($layout_texts['top.menu.forgot'], '/account/forgot');
?>
My first question
could be a little off-topic, and if that's the case I apologyze: if the user is
viewing this form throu
99 matches
Mail list logo
