Forcing http to go to https

srotondo · May 19th, 2011, 10:32 PM

Good evening.

This is not really an asp question however my site is coded in asp, but here goes:

I'm about to implement https for my asp website; I use IIS 7 to serve it up.

I need to redirect all http hits to https. I know I can make this global change in IIS but that is insufficient. The reason is that my site generates hundreds of e-mails which go to my users and these e-mails contain hard-coded links back to many, many different pages on my site. When I switch over to https, my users will still reference the old e-mails with the old links and won't be able to access the web page unless there's a redirect.

Do you know how I can implement these redirects? Is there a change to my web.config file I can make? I've also been reading articles about htaccess redirect but it seems this is not iis friendly.

Any help you can provide would be appreciated.

Thank you!

Sal

eganges · June 3rd, 2011, 01:44 AM

Hello Sal,

Please keep the below code in top of all pages , it will redirect from http to https.

Code:

IF Request.ServerVariables("HTTPS")="off" THEN
IF LEN(Request.ServerVariables("QUERY_STRING"))>0 THEN
 Response.Redirect "https://" + Request.ServerVariables("SERVER_NAME")+   Request.ServerVariables("URL")+"?"+Request.ServerVariables("QUERY_STRING")

 ELSE
 Response.Redirect "https://" + Request.ServerVariables("SERVER_NAME")+  Request.ServerVariables("URL")
END IF
END IF

Thank you,
Ganges.

srotondo · June 10th, 2011, 04:14 PM

thank you!