Comments on: How to use SSL / HTTPS effectively in your PHP website

By: Frank

Frank — Wed, 27 Apr 2011 05:23:55 +0000

Hey! Great article ! Thanks for sharing this. I’d like to know something however. If I simply enforce the use of https on the pages where sensitive info is being sent, will I get an effective protection or are there normally other steps required to safely encrypt data ? I have heard of other methods such as using private/public keys to store data in databases, but is this really useful if I only want the data to be encrypted from client to server ?

Thank you!

By: Steve

Steve — Thu, 25 Nov 2010 01:48:31 +0000

Hey thanks for letting me know about the image. Fixed it now.

By: Thomas

Thomas — Wed, 24 Nov 2010 13:43:31 +0000

Huh, interesting. Thanks mang. Also – your image there is a bit broken. Time for a cigarette.

By: Steve

Steve — Tue, 27 Jul 2010 23:03:44 +0000

@Jean:

You’re quite right! If you are going to submit data to a form from a non-encrypted page, then you must make sure that you type in the complete URL with HTTPS:// included.

By: Jean

Jean — Thu, 15 Apr 2010 05:03:59 +0000

Very informative. There is however something that is puzzling me and can’t find anything when I google for it.

what happen to the data passed with the url.

if I have http://www.mysite/login.php?usr=asd&pwd=123

is the usr and pwd content definitly not encrypted even if I redirect? I obviously think it’s not encrypted, but I have limited knowledge on that matter. I don’t see the point in redirecting within php to https because the data is already available.

Or is it not working like that?

thanks for you help.

Jean