iis 7 rewrite url http to https only for specific page

Question

3.00/5 (1 vote)

See more:

Hi, I have a shopping cart website that has SSL certificate installed. all the aspx pages can be accessed either with http:// or https:// prefix. but I only want to show https:// prefix if the page name ends with either "checkout.aspx" or "confirmorder.aspx" and entire site should stay http:// for rest of the pages. The current rewrite I have is

XML

<rules>
    <rule name="Redirect to HTTPS" stopprocessing="true">
        <match url="(.*)" />
        <conditions>
            <add input="{URL}" pattern="^.CheckOut\.aspx$" ignorecase="true" />
            <add input="{HTTPS}" pattern="^OFF$" />
        </conditions>
        <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirecttype="Permanent" />
    </rule>
</rules>

but I want to put confirmorder.aspx in it as well. It works when user is redirected to checkout.aspx but when I come to home page I still see https:// so it is not really working. could someone please help how to do it.

Posted 17-Nov-13 1:25am

uglyeyes

Updated 26-Nov-13 13:49pm

Yvan Rodrigues

v4

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Yvan Rodrigues · Answer 1 · 2013-11-26T14:18:00

Go learn Regular Expressions. It will change your life. Seriously.

If what you have works the way you want, just change the first condition to

XML

<add input="{URL}" pattern="(CheckOut|ConfirmOrder)\.aspx$" ignorecase="true" />his will match both cases (see #1).

Don't do this. Please. Make the whole site HTTPS, or convince me why you shouldn't. Here are some good reasons to do so:

More security is always better than less security.
It will give site visitors more confidence.
Most people are more concerned that people find out what vibrator, blow-up doll, ammunition, prescription drugs, adult diapers, books, movies, tampons, and _____ they are putting in their cart than they are about someone finding out their credit card number. The former could cost them their career or spouse, the latter is usually capped at fifty bucks.
Your shopping cart is none of the NSA's business.
It costs you nothing. (well, if your site is busy enough to need 500 servers, it will now need 502.
Top 7 Myths about HTTPS