neeraj_130680
Jul 23, 2013Nimbostratus
Removal of "s" from HTTPS loads page in HTTP
I am facing security problem in my website. My website starts from HTTP page (Searching for product, selecting it and proceed to payment and User's information). My user's information page and thereafter every page till purchase confirmation page are HTTPS pages.
But when I remove "s" from https in browser URL and press enter, whole page gets load in HTTP mode which is security breach for my site.
I don't know how to stop that. What I need is if user removes "s" from url and enter, either it should restrict the user to do so and load page again as HTTPS or redirect user to error page.
My application runs on IIS server with certificate installed at load balancer. Please help me with solution. Thanks.