Question

I have a secured site using ssl. I have a php file that checks the login and if you are not logged in it brings up a login form, once you log in the page refreshed and the login is checked again and when it passes it loads the page content. What i am trying to do is have it load the login in https then when the javascript gets the ok from ajax that the login was successful, the page is reloaded with just http to reduce the load time and latency of the page (these are large pages and any little thing will help). I need to do this dynamically, so i can not just give it a redirect url.

Answer 1

To solve this problem you can use this untested psuedo code loaded at the top of every page you require a login on.

if(loggedin()&&$_SERVER[SERVER_PORT]==443)
{ 
   //if user is logged in but they are still on the https site, redirect to the http site
    header("Location:http://$_SERVER[HTTP_HOST]$_SERVER[SCRIPT_NAME]?$_SERVER[QUERY_STRING]");
}
elseif(!loggedin()&&$_SERVER[SERVER_PORT]!=443)
{
    //if the user is not logged in and they are not on the secure site,  send them to the login page on the secure site
    header("Location:https://$_SERVER[HTTP_HOST]/login.php");
}