enforce ssl for login sessions

[busy] / .htaccess

diff --git a/.htaccess b/.htaccess
index 615ac51842a7f09fc83514f25e917ac3a6a8f341..021a64f3bdf849db0ef38574db37f0454256ca91 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -3,6 +3,10 @@ AddHandler cgi-script .cgi
 DirectoryIndex index.cgi
 
 <Files session.cgi>
+  RewriteEngine        On
+  RewriteCond  %{SERVER_PORT}  80
+  RewriteRule  ^.*(session.cgi.*)$     https://%{SERVER_NAME}/$1
+
   AuthType Basic
   AuthName "Busy Login"
   AuthUserFile /sites/busy.plutz.net/http/auth/htpasswd