PHP Detect if incoming request is using https

Question

I have made a sweet api but I want to only accept requests to ssl version so if users submit their $_REQUEST to http://example.com then I would like to detect that and show them a warning.

Possible duplicate of PHP Get Site URL Protocol - http vs https — CherryDT
– CherryDT, Commented May 9, 2016 at 17:05
Is there any reason that PHP needs to know that https was not used other than displaying the error? Would it be possible to use an .htaccess redirect instead? — MonkeyZeus
– MonkeyZeus, Commented May 9, 2016 at 17:08
Not really becasue once they have made the insecure request its game over already so I want to block them after the first request and say "hey guy, you can only query this api with ssl otherwise you are going to leak data across the internet which is not going to do anyone any favours". — Craig Edmonds
– Craig Edmonds, Commented May 9, 2016 at 19:14

Polak · Accepted Answer · 2016-05-09 17:28:09Z

1

If you're using apache with mod_ssl, check the directive called SSLRequireSSL And for nginx should be something similar here. This is used to allow/deny access to your files/scripts depending on the port which the request comes from.

edited May 9, 2016 at 17:28

answered May 9, 2016 at 17:21

Polak

1,7001 gold badge21 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

PHP Detect if incoming request is using https

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related