[ic] AlwaysSecure is not working

[Kevin Walsh]

> 
>    AlwaysSecure    ord/checkout
> 
> is not working. Am I missing somethings?
> 
> In normal case, if I call
> 
> http://www.mydomain.com/cgi-bin/myshop/ord/checkout
> 
> it should be secure by IC automatically. But why is that not working
> with IC? MV make this right!
> 
If you hard-code http, you get http and not https, as you would
expect.

If you use [area href="ord/checkout" secure=1] then the tag will
generate an https URL.  If you have AlwaysSecure set for the page
then the secure=1 is irrelevant; the page URL will always generated
using https.  This works for [area], [page] and other tags that
generate URLs.

Basically, if you hard-code it, you get what you ask for.  Never
hard-code internal URLs when you could be using [area] or [page].

-- 
   _/   _/  _/_/_/_/  _/    _/  _/_/_/  _/    _/
  _/_/_/   _/_/      _/    _/    _/    _/_/  _/   K e v i n   W a l s h
 _/ _/    _/          _/ _/     _/    _/  _/_/    kevin@cursor.biz
_/   _/  _/_/_/_/      _/    _/_/_/  _/    _/