CodeCharge Studio
search Register Login  

Visual PHP Web Development

Visually Create Internationalized Web Applications, Web Reports, Calendars, and more.
CodeCharge.com

YesSoftware Forums -> Archive -> CodeCharge.Discussion

 To SSL or to not SSL... that is the question

Print topic Send  topic

Author Message
William Raymond
Posted: 03/20/2002, 8:35 AM

Hello,

I have a test server at home and do not have an SSL certificate. For my
client's live site, there is an SSL certificate.

My question is this:

(1) Does anyone know if there is such a thing as an SSL "test harness" of
some sort for IIS?
(2) How can I get my forms to point to HTTPS://www....?
(3) Can I do a global search/replace on all my CodeCharge pages to change
from "HTTP://" to "HTTPS://"?


Thanks,

-Bill


Kenneth E. Lussier
Posted: 03/20/2002, 9:59 AM

William Raymond wrote:
>
> My question is this:
>
> (1) Does anyone know if there is such a thing as an SSL "test harness" of
> some sort for IIS?
> (2) How can I get my forms to point to HTTPS://www....?
> (3) Can I do a global search/replace on all my CodeCharge pages to change
> from "HTTP://" to "HTTPS://"?

I can't answer #1, as I do not use IIS. However, #2 and #3 can both be
accomplished by changing the URL in the projects
Properties/Publishing/Live Site section.

C-Ya,
Kenny


--
----------------------------------------------------------------------------
"In conclusion, please be wary where authority reigns" -- Warrior Soul

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0
William Raymond
Posted: 03/20/2002, 11:37 AM

Hi Kenny,

The problem though is that there are certain pages that need to be secured,
but others that don't. For instance, there are a number of free pages, but
once they get to a certain point, the customer needs to be brought to a
secure page to enter their credit card information. After they are done,
the following pages no longer need to be secure.

So... I would like to identify those pages that are SSL-enabled and those
that aren't, rather than doing it globally for an entire project.

Any ideas other than hard-coding the URL's in my after updates/before
inserts?

Thanks,

-Bill

--
Bill Raymond
Project MVP
braymond@officecollab.com
Office Collaborators, Inc.


"Kenneth E. Lussier" <klussier@zuken.com> wrote in message
news:3C98CDDD.E748C770@zuken.com...
> William Raymond wrote:
> >
> > My question is this:
> >
> > (1) Does anyone know if there is such a thing as an SSL "test harness"
of
> > some sort for IIS?
> > (2) How can I get my forms to point to HTTPS://www....?
> > (3) Can I do a global search/replace on all my CodeCharge pages to
change
> > from "HTTP://" to "HTTPS://"?
>
> I can't answer #1, as I do not use IIS. However, #2 and #3 can both be
> accomplished by changing the URL in the projects
> Properties/Publishing/Live Site section.
>
> C-Ya,
> Kenny
>
>
> --
> --------------------------------------------------------------------------
--
> "In conclusion, please be wary where authority reigns" -- Warrior Soul
>
> Kenneth E. Lussier
> Sr. Systems Administrator
> Zuken, USA
> PGP KeyID CB254DD0
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0

Charly Crembil
Posted: 03/25/2002, 5:33 PM

Hmmm... I think you are having two sites: one protected and one unprotected.
So, you'll need to manage with CC as 2 different sites.

Regards,
Charly.

"William Raymond" <braymond@officecollab.com> escribió en el mensaje
news:a7aod4$uc2$1@news.codecharge.com...
> Hi Kenny,
>
> The problem though is that there are certain pages that need to be
secured,
> but others that don't. For instance, there are a number of free pages,
but
> once they get to a certain point, the customer needs to be brought to a
> secure page to enter their credit card information. After they are done,
> the following pages no longer need to be secure.
>
> So... I would like to identify those pages that are SSL-enabled and those
> that aren't, rather than doing it globally for an entire project.
>
> Any ideas other than hard-coding the URL's in my after updates/before
> inserts?
>
> Thanks,
>
> -Bill
>
> --
> Bill Raymond
> Project MVP
>braymond@officecollab.com
> Office Collaborators, Inc.
>
>
> "Kenneth E. Lussier" <klussier@zuken.com> wrote in message
>news:3C98CDDD.E748C770@zuken.com...
> > William Raymond wrote:
> > >
> > > My question is this:
> > >
> > > (1) Does anyone know if there is such a thing as an SSL "test harness"
> of
> > > some sort for IIS?
> > > (2) How can I get my forms to point to HTTPS://www....?
> > > (3) Can I do a global search/replace on all my CodeCharge pages to
> change
> > > from "HTTP://" to "HTTPS://"?
> >
> > I can't answer #1, as I do not use IIS. However, #2 and #3 can both be
> > accomplished by changing the URL in the projects
> > Properties/Publishing/Live Site section.
> >
> > C-Ya,
> > Kenny
> >
> >
> > --
>
> --------------------------------------------------------------------------
> --
> > "In conclusion, please be wary where authority reigns" -- Warrior Soul
> >
> > Kenneth E. Lussier
> > Sr. Systems Administrator
> > Zuken, USA
> > PGP KeyID CB254DD0
> > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0
>
>

William Raymond
Posted: 03/28/2002, 9:42 AM

Hi Charly,

Actually, no. There are a number of pages the customer can use for free and
then when they are ready to see the pay content, they are passed to an SSL
page that processes the credit card and then brings the customer back to the
pay content area but with no SSL. So, it all needs to be integrated.

Any ideas?

Thanks,

-Bill

--
Bill Raymond
Project MVP
braymond@officecollab.com
Office Collaborators, Inc.


"Charly Crembil" <nouser@hotmail.com> wrote in message
news:a7oj4q$gno$1@news.codecharge.com...
> Hmmm... I think you are having two sites: one protected and one
unprotected.
> So, you'll need to manage with CC as 2 different sites.
>
> Regards,
> Charly.
>
> "William Raymond" <braymond@officecollab.com> escribió en el mensaje
>news:a7aod4$uc2$1@news.codecharge.com...
> > Hi Kenny,
> >
> > The problem though is that there are certain pages that need to be
> secured,
> > but others that don't. For instance, there are a number of free pages,
> but
> > once they get to a certain point, the customer needs to be brought to a
> > secure page to enter their credit card information. After they are
done,
> > the following pages no longer need to be secure.
> >
> > So... I would like to identify those pages that are SSL-enabled and
those
> > that aren't, rather than doing it globally for an entire project.
> >
> > Any ideas other than hard-coding the URL's in my after updates/before
> > inserts?
> >
> > Thanks,
> >
> > -Bill
> >
> > --
> > Bill Raymond
> > Project MVP
> >braymond@officecollab.com
> > Office Collaborators, Inc.
> >
> >
> > "Kenneth E. Lussier" <klussier@zuken.com> wrote in message
> >news:3C98CDDD.E748C770@zuken.com...
> > > William Raymond wrote:
> > > >
> > > > My question is this:
> > > >
> > > > (1) Does anyone know if there is such a thing as an SSL "test
harness"
> > of
> > > > some sort for IIS?
> > > > (2) How can I get my forms to point to HTTPS://www....?
> > > > (3) Can I do a global search/replace on all my CodeCharge pages to
> > change
> > > > from "HTTP://" to "HTTPS://"?
> > >
> > > I can't answer #1, as I do not use IIS. However, #2 and #3 can both be
> > > accomplished by changing the URL in the projects
> > > Properties/Publishing/Live Site section.
> > >
> > > C-Ya,
> > > Kenny
> > >
> > >
> > > --
> >
>
> --------------------------------------------------------------------------
> > --
> > > "In conclusion, please be wary where authority reigns" -- Warrior Soul
> > >
> > > Kenneth E. Lussier
> > > Sr. Systems Administrator
> > > Zuken, USA
> > > PGP KeyID CB254DD0
> > > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0
> >
> >
>
>

Jason Charette
Posted: 03/28/2002, 11:34 AM

I'd put some custom code in the header which reads something like this:

If is_not_paying_customer and my URL starts with http, do nothing, otherwise
redirect to page of same name, but prefaced with HTTPS.

I have written something similar in PHP, if you're interested. Don't know
how you'd do it in other languages...


"William Raymond" <braymond@officecollab.com> wrote in message
news:a7vkl8$to3$1@news.codecharge.com...
> Hi Charly,
>
> Actually, no. There are a number of pages the customer can use for free
and
> then when they are ready to see the pay content, they are passed to an SSL
> page that processes the credit card and then brings the customer back to
the
> pay content area but with no SSL. So, it all needs to be integrated.
>
> Any ideas?
>
> Thanks,
>
> -Bill
>
> --
> Bill Raymond
> Project MVP
>braymond@officecollab.com
> Office Collaborators, Inc.
>
>
> "Charly Crembil" <nouser@hotmail.com> wrote in message
>news:a7oj4q$gno$1@news.codecharge.com...
> > Hmmm... I think you are having two sites: one protected and one
> unprotected.
> > So, you'll need to manage with CC as 2 different sites.
> >
> > Regards,
> > Charly.
> >
> > "William Raymond" <braymond@officecollab.com> escribió en el mensaje
> >news:a7aod4$uc2$1@news.codecharge.com...
> > > Hi Kenny,
> > >
> > > The problem though is that there are certain pages that need to be
> > secured,
> > > but others that don't. For instance, there are a number of free
pages,
> > but
> > > once they get to a certain point, the customer needs to be brought to
a
> > > secure page to enter their credit card information. After they are
> done,
> > > the following pages no longer need to be secure.
> > >
> > > So... I would like to identify those pages that are SSL-enabled and
> those
> > > that aren't, rather than doing it globally for an entire project.
> > >
> > > Any ideas other than hard-coding the URL's in my after updates/before
> > > inserts?
> > >
> > > Thanks,
> > >
> > > -Bill
> > >
> > > --
> > > Bill Raymond
> > > Project MVP
> > >braymond@officecollab.com
> > > Office Collaborators, Inc.
> > >
> > >
> > > "Kenneth E. Lussier" <klussier@zuken.com> wrote in message
> > >news:3C98CDDD.E748C770@zuken.com...
> > > > William Raymond wrote:
> > > > >
> > > > > My question is this:
> > > > >
> > > > > (1) Does anyone know if there is such a thing as an SSL "test
> harness"
> > > of
> > > > > some sort for IIS?
> > > > > (2) How can I get my forms to point to HTTPS://www....?
> > > > > (3) Can I do a global search/replace on all my CodeCharge pages to
> > > change
> > > > > from "HTTP://" to "HTTPS://"?
> > > >
> > > > I can't answer #1, as I do not use IIS. However, #2 and #3 can both
be
> > > > accomplished by changing the URL in the projects
> > > > Properties/Publishing/Live Site section.
> > > >
> > > > C-Ya,
> > > > Kenny
> > > >
> > > >
> > > > --
> > >
> >
>
> --------------------------------------------------------------------------
> > > --
> > > > "In conclusion, please be wary where authority reigns" -- Warrior
Soul
> > > >
> > > > Kenneth E. Lussier
> > > > Sr. Systems Administrator
> > > > Zuken, USA
> > > > PGP KeyID CB254DD0
> > > > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0
> > >
> > >
> >
> >
>
>

William Raymond
Posted: 03/30/2002, 1:41 PM

Thanks Jason! This is a much better solution. I will work on this
/ASP. -Bill

--
Bill Raymond
Project MVP
braymond@officecollab.com
Office Collaborators, Inc.

http://www.mvps.org/project/


"Jason Charette" <jasonc@bitheads.com> wrote in message
news:a7vr7d$afj$1@news.codecharge.com...
> I'd put some custom code in the header which reads something like this:
>
> If is_not_paying_customer and my URL starts with http, do nothing,
otherwise
> redirect to page of same name, but prefaced with HTTPS.
>
> I have written something similar in PHP, if you're interested. Don't know
> how you'd do it in other languages...
>
>
> "William Raymond" <braymond@officecollab.com> wrote in message
>news:a7vkl8$to3$1@news.codecharge.com...
> > Hi Charly,
> >
> > Actually, no. There are a number of pages the customer can use for free
> and
> > then when they are ready to see the pay content, they are passed to an
SSL
> > page that processes the credit card and then brings the customer back to
> the
> > pay content area but with no SSL. So, it all needs to be integrated.
> >
> > Any ideas?
> >
> > Thanks,
> >
> > -Bill
> >
> > --
> > Bill Raymond
> > Project MVP
> >braymond@officecollab.com
> > Office Collaborators, Inc.
> >
> >
> > "Charly Crembil" <nouser@hotmail.com> wrote in message
> >news:a7oj4q$gno$1@news.codecharge.com...
> > > Hmmm... I think you are having two sites: one protected and one
> > unprotected.
> > > So, you'll need to manage with CC as 2 different sites.
> > >
> > > Regards,
> > > Charly.
> > >
> > > "William Raymond" <braymond@officecollab.com> escribió en el mensaje
> > >news:a7aod4$uc2$1@news.codecharge.com...
> > > > Hi Kenny,
> > > >
> > > > The problem though is that there are certain pages that need to be
> > > secured,
> > > > but others that don't. For instance, there are a number of free
> pages,
> > > but
> > > > once they get to a certain point, the customer needs to be brought
to
> a
> > > > secure page to enter their credit card information. After they are
> > done,
> > > > the following pages no longer need to be secure.
> > > >
> > > > So... I would like to identify those pages that are SSL-enabled and
> > those
> > > > that aren't, rather than doing it globally for an entire project.
> > > >
> > > > Any ideas other than hard-coding the URL's in my after
updates/before
> > > > inserts?
> > > >
> > > > Thanks,
> > > >
> > > > -Bill
> > > >
> > > > --
> > > > Bill Raymond
> > > > Project MVP
> > > >braymond@officecollab.com
> > > > Office Collaborators, Inc.
> > > >
> > > >
> > > > "Kenneth E. Lussier" <klussier@zuken.com> wrote in message
> > > >news:3C98CDDD.E748C770@zuken.com...
> > > > > William Raymond wrote:
> > > > > >
> > > > > > My question is this:
> > > > > >
> > > > > > (1) Does anyone know if there is such a thing as an SSL "test
> > harness"
> > > > of
> > > > > > some sort for IIS?
> > > > > > (2) How can I get my forms to point to HTTPS://www....?
> > > > > > (3) Can I do a global search/replace on all my CodeCharge pages
to
> > > > change
> > > > > > from "HTTP://" to "HTTPS://"?
> > > > >
> > > > > I can't answer #1, as I do not use IIS. However, #2 and #3 can
both
> be
> > > > > accomplished by changing the URL in the projects
> > > > > Properties/Publishing/Live Site section.
> > > > >
> > > > > C-Ya,
> > > > > Kenny
> > > > >
> > > > >
> > > > > --
> > > >
> > >
> >
>
> --------------------------------------------------------------------------
> > > > --
> > > > > "In conclusion, please be wary where authority reigns" -- Warrior
> Soul
> > > > >
> > > > > Kenneth E. Lussier
> > > > > Sr. Systems Administrator
> > > > > Zuken, USA
> > > > > PGP KeyID CB254DD0
> > > > > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0
> > > >
> > > >
> > >
> > >
> >
> >
>
>
>


   


These are Community Forums for users to exchange information.
If you would like to obtain technical product help please visit http://support.yessoftware.com.

MS Access to Web

Convert MS Access to Web.
Join thousands of Web developers who build Web applications with minimal coding.

CodeCharge.com

Home   |    Search   |    Members   |    Register   |    Login


Powered by UltraApps Forum created with CodeCharge Studio
Copyright © 2003-2004 by UltraApps.com  and YesSoftware, Inc.