Contao Open Source CMS > Contao forum

Switch to german forum

Index > Extensions > Extension: SslRedirect

flatpredator
User
Avatar
Hi there,

I just created a new extension. http://www.typolight.org/wiki/extensions:sslredirect

Now your pages (frontend-login, contact-form, ...) can be forced to use a secure connection.
Last edited by flatpredator, 2008-01-29 10:04
2008-01-29 10:04
Ben
Partner
Avatar
Posts: 2126
Atlanta, Georgia, United States
Eric,

Great extension! I wonder if it would be more seamless to integrate this on the Page structure level. There would be a checkbox where you determine whether a page requires SSL or not. I do see the benefits of being able to add it to Page layouts, though. Maybe Leo has some thoughts about integrating this into the core on the Page structure level.
2008-01-31 06:59
flatpredator
User
Avatar
Hi Ben,

I agree totally with your and I suggested this already as a new feature for TL. This extension is more or less a workaround until leo integrates this into the page-options :)
2008-01-31 09:52
leo
Administrator
Avatar
Posts: 7046
Wuppertal, Germany
Hi guys,

I like the idea a lot, however, I do not like the fact that it cannot be used with SSL proxies. This feature has been requested before and I think that this was the reason why it has not been implemented.

Regards
Leo
2008-01-31 20:05
flatpredator
User
Avatar
Hi Leo,

in this case the admin has to specify the proxy-domain somewhere in the TL configuration. If set the redirection takes the user to the proxy-server-address.
2008-01-31 20:27
fbliss
User
Avatar
Posts: 476
Greenfield, United States
Hello flat,

Nice work on the module. Extremely simple and flexible. It is coming in handy!

Best,

Fred
Come to the light... Typolight.
2008-02-01 04:20
fbliss
User
Avatar
Posts: 476
Greenfield, United States
Hi again, flat.

Have you given any thought to making this module take a different approach of designating certain pages as ssl-enabled versus once accessed, always on? Servers experience up to 30% increase in CPU load due to SSL process overhead.

Your thoughts?

Fred
Last edited by fbliss, 2008-02-06 05:05
Come to the light... Typolight.
2008-02-06 05:04
flatpredator
User
Avatar
The best way seems to be to create a new page-type ("secured-page" or something like that). But this requires to modify the core of TL. The front-controller needs to know what to do if the page type is "secured" ...
Or one could add a flag into the regular page ("Force secure connection for this page"). But this requires some core modifications, too.

Some hooks would be nice "preExecute" or "onPageTypeProcess" B)

SSL does indeed produce overhead. But I think first security and after that performance :)
2008-02-06 15:26
Ben
Partner
Avatar
Posts: 2126
Atlanta, Georgia, United States
FlatPredator,

Just wondering if this module will make it's way into the extension repository. It is very useful and I'd hate to see it "go away" once the old wiki / repository is removed at the end of the year.
2008-10-29 17:27
Stephan
User
Avatar
Hi,

I just talked to Andreas Schempp to create an extension, that adds the missing feature to redirect to http to the already existing extension [SSLRedirect]. Andreas did the job in a few hours!

This new extension is called [Redirect] and can be found in the repository. Finaly you can use it to redirect to https and to http, just include the appropriate module.

In addition there are two more redirect-types possible.

Regards
2008-12-09 19:38
davidm
User
Avatar
Posts: 82
Paris, France
This is very cool news Stephan thanks for sharing, off to downloading and kudos to Andreas !
++ open source enthusiast, textpattern and modx veteran, typolight student ++

.: loving typolight's versatility and flexibility, impressed by reliability and security and enjoying fast development time :.

++ amazed by the Catalog/CatalogExt/Taxonomy combo and lots of high quality modules... kudos ! +++
2008-12-09 19:42
Ben
Partner
Avatar
Posts: 2126
Atlanta, Georgia, United States
Here's the link to the module: http://www.typolight.org/extension-list/…ect.10000009.en.html

This is good news that you can now remove SSL encryption, as this was a problem with the previous setup. Once you were on a particular page of a site using SSL, there was not a good solution to go back to an unsecure connection ... until now!

Thanks for your work on this, Andreas.
2008-12-09 20:13
andreas.schempp
Partner
Avatar
Posts: 2194
St. Moritz, Switzerland
Btw, it took me about 45 minutes to do everything... Creating the module was less than 5 minutes... :thumbup:

Be aware that the new module does no longer take care of the localconfig.php settings, there is a new field in the front end module to add a redirect url.
Für spezielle Modulwünsche oder Programmierungen als Auftrag könnt Ihr mich jederzeit per E-Mail an andreas@schempp.ch kontaktieren.

Feel free to contact me for custom modules or development as an order by e-mail to andreas@schempp.ch


Alle Erweiterungen werden für 2.7 aktualisiert! - All extensions will be updated for 2.7!
2008-12-09 20:31