Re: Determining connection type

From: Big and Blue (No_4_at_dsl.pipex.com)
Date: 12/08/04 

Date: Wed, 08 Dec 2004 00:44:17 +0000

Marshall Dudley wrote:
>>
> This is a shopping cart application and the image is thrown from the images
> directory. Normally it is thrown non securely so that we don't have the
> overhead of throwing it securily, but if we are on a secure page, it needs
> to be thrown securily,

    It is customary to serve images, not throw them. And, as has been
mentioned, this is a CGI issue (in fact, it's an HTML one), not a Perl problem.

> that is the image tag needs to have https instead of
> http in it. I could go relative, which would work, but some stores actually
> throw images from another site on the net, so that won't always work.

    Well, use relative when they don't.

> That is I need to use
>
> <img src=https://domain.com/images/image.jpg> instead of <img
> src=http://domain.com/images/image.jpg> There are other issues as well,
> such as if I need to close a secure form and reopen as an insecure form or
> not, but it all depends on determining if the connection is an ssl
> connection or not.

    So read up on your Web server - how to configure it and use it. It is
that which is interacting with your program using CGI.

    But the answer you are probably looking for it to check your
environment for SSL_* variables being set.

>>>However I cannot find any way in perl to tell if the connection is
>>>secure or non secure.

    That's because it isn't a Perl issue. Perl may let you discover the
answer, but you really shoudl get to grips with your Web server and how to
run it first. In particular, if you are writing a shopping-cart
application (i.e., presumably some financial aspect to this) without such
an understanding could you please publish the Website address here so that
I may avoid using it? 

-- 
      -*-    Just because I've written it here doesn't    -*-
      -*-    mean that you should, or I do, believe it.   -*-

Relevant Pages

  • [Full-disclosure] AFS - The Ultimate Sulution?
    ... This is kind of a combination of RemoteBoot and AFS. ... to supply forged images to the workstation. ... AFS however uses Kerberos to authenticate and thus is considered secure. ...
    (Full-Disclosure)
  • Re: Secure and Nonsecure items
    ... You need to place your images in a secure directory, ... Secure your images directory, ... telling our customers to alter thier security settings for our ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Perceptual symbol systems
    ... >> Patty, that article in particular shouldn't be thrown into the hopper, ... >> but thrown into the garbage. ... Here are 4 cases where images appear on our ... to explain their visual experience with viewers ad infinitum. ...
    (sci.cognitive)
  • Re: Secure and Nonsecure items
    ... I thought it might be images. ... Look carefully for the non-secure items in your code. ... When you do, secure them. ... > The only thing I can think of, is the number of popups displayed seems ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SSL Peformance for images ...
    ... Use seprate images and scripts for secure area. ... > I currently have a web site using SSL encryption and it processes very ... I want to keep the images and SSL but improve ...
    (microsoft.public.inetserver.iis.security)
Loading