Vinay,
The code I gave you yesterday works for securing the entire site under https. Yesterday our site was all secure, but today it has a new code in the index file, and I'm not totally sure that it's necessary any more:
<?
if(isset($HTTP_SERVER_VARS[HTTPS]))
{
$FULL_URL = "http://".$SERVER_NAME.$PHP_SELF;
header("Location: $FULL_URL");
}
?>
That means that only certain pages will be secured. The chosen pages have this at the beginning (maybe it works using just this, with no server markup on the index):
<?
include("class/DataBase.php");
if(!isset($HTTP_SERVER_VARS[HTTPS]))
{
$newurl = "https://www.spauno.com/form/paso_1.php";
header("location: $newurl");
if(!isset($HTTP_SERVER_VARS[HTTPS]))
}
?>
The file paso_1.php is the one being secured. There are other secure files, all php.
However, if you visit an ordinary file that does not have server markup (for example
Massage Experiences) AFTER you have visited a secure one, it stays in https mode. It shouldn't and I don't know why. Maybe it's because of the php code on the index file... I'll play with it on Monday and let you know what happened.
Does someone else have any suggestions on how to fix this?