Here is a code snippet to redirect the user back and forth from HTTP to HTTPS. This example shows how to transfer node/add forms in SSL.
Adding code to the menu hook to ensure it's executed before anything else:
<?php
function MYMODULE_menu() {
// set a variable to keep track if something in the page should be sent in ssl
variable_set('MYMODULE_ssl', FALSE);
// ...code...
$items = array();
// ...code...
return $items;
}
?>Adding code to the form_alter hook, to check if certain forms should be sent in SSL
<?php
function MYMODULE_form_alter($form_id, &$form) {
// ...code...
// check if form should be sent in ssl
if (substr($form_id, -10) == '_node_form') {
variable_set('MYMODULE_ssl', TRUE);
}
// ...code...
}
?>The guts of the code are added to a function that's called from the theme:
<?php
function _MYMODULE_check_ssl($enableSSL = FALSE, $messages = NULL) {
// check for ssl enabled
$sslOn = ($_SERVER['HTTPS'] == 'on' ? TRUE : FALSE);
// check if the page needs to be redirected
if ($sslOn != $enableSSL) {
// if there are drupal messages, set them to the session.
// when the page is redirected, the messages will be returned to the theme
if (strlen($messages)) variable_set('MYMODULE_ssl_messages', $messages);
// create a new URL
$newURL = 'http' . ($sslOn ? '' : 's') . "://" . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
// redirect user
// drupal_goto?
header("Location: $newURL");
die;
}
// check if there is a message stored in the session
$messages = variable_get('MYMODULE_ssl_messages', NULL);
if (strlen($messages)) {
// unset message in session
variable_set('MYMODULE_ssl_messages', NULL);
// return message to theme
return $messages;
}
}
?>Lastly, I added a line to the top of the page.tpl.php file in my theme:
<?php
$messages .= _MYMODULE_check_ssl( variable_get('MYMODULE_ssl', FALSE), $messages );
?>Also, check out this page to see how to change links from http to https using jQuery.