SSL in CodeIgnitor

[eluser]Rick Jolly[/eluser]
A couple of comments:

1) To avoid your problem with multiple secure ports, instead of using the server port ($_SERVER['SERVER_PORT']), use $_SERVER['HTTPS'].

Code:

// example:
$protocol = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 'https' : 'http';

2)Instead of essentially duplicating the base_url(), site_url(), and redirect() just to add an "s" to "http", override them to add an optional "protocol" parameter. I won't comment on anchor() or form_open() since I don't use them.

Edit:
3)By default, if the current protocol is https, then the base_url should be https as well. That way all images, js, and css includes will use https by default and you'll avoid warnings in IE. Exceptions for unsecure site links can be made by specifying http protocol in the overriden url helper methods above. There shouldn't be a need for a "secure_base_url" config value.

Code:

// example:
$config['protocol'] = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 'https' : 'http';
$config['base_url'] = $config['protocol'] . '://your-site.com/';

// and your base_url method could look like this:
function base_url($protocol = false)
{
  $CI =& get_instance();
  $base_url = $CI->config->slash_item('base_url');
  if (($protocol) AND ($pos = strpos($base_url, '://')))
  {
     $base_url= $protocol . substr($base_url, $pos);
  }
  return $base_url;
}

CI should seperate the protocol from base_url in the config imo.