[ic] AlwaysSecure for selected search results

Rick Bragg lists at gmnet.net
Thu Jun 12 03:01:43 UTC 2008

On Wed, 2008-06-11 at 20:57 -0400, Angus Rogerson wrote:
> Hello,
> I have a number of ways of searching books in our university bookstore - 
> author, title, course etc. I also have one search which provides a 
> personal booklist based on confidential course registration information 
> from the registrar. The customer must authenticate (using JA-SIG CAS) to 
> use this search. The authentication works but only when I have 'secure' 
> set properly. There are some scenarios where secure is not set.
> AlwaysSecure lets me choose particular pages which must use the SecureURL 
> instead of VendURL. However, all searches come up as search.html, so 
> AlwaysSecure is all or nothing for search results.
> Is there an equivalent to AlwaysSecure which will let me specify the 
> search results for one type of search as secure, and not require the other 
> types to be secure.
> So, require this
>  	search.html?mv_profile=student_search
> which displays
>  	results_student.html
> to always be secure.
> But, allow this
>  	search.html?mv_profile=author_search
> which displays
>  	results_author.html
> to not be secure.
> Thanks in advance.
> Angus
> Angus Rogerson
> Retail Services,
> University of Waterloo
> Waterloo, Ontario

also, from the page that the start the search from (the page where this
form is) should be a secure page...


This message has been scanned for viruses and
dangerous content by Green Mountain Network, and is
believed to be clean.

More information about the interchange-users mailing list