Welcome Guest, Not a member yet? Register   Sign In
CSRF protection/XSS filter over ssl
#1

[eluser]Unknown[/eluser]
Hey all,

I'm some what new to codeigniter.
and got to say i love it Smile, and used it in my graduation web app with success

how ever started developing an app to ease the management of my servers, this app runs both ssl and none ssl, all actions that require a log in needs to go over ssl requests, this is just fine and no problem there.

BUT when i enable the CSRF protection AND XSS filter it just won't work over ssl but work just fine on none ssl connection??

am i missing something or is this something in the CI system that makes it impossible over ssl??

Regards,
Christian
#2

[eluser]Unknown[/eluser]
My bad, this is truely a rookie mistake i post all the form to none ssl,

that's fixed,
but now all post requests over ssl times out,
while all get request runs??

maby this is my app, but cant see how when POST/GET over none ssl and GET over ssl works,
while POST times out, and the logs say..
Quote:DEBUG - 2012-04-23 21:58:15 --> Controller Class Initialized
DEBUG - 2012-04-23 21:58:15 --> File loaded: application/views/cp_auth.php
DEBUG - 2012-04-23 21:58:15 --> Final output sent to browser
DEBUG - 2012-04-23 21:58:15 --> Total execution time: 0.0100

that just seams strange to me




Theme © iAndrew 2016 - Forum software by © MyBB