Fixed double login prompt on authentication pages such as log viewer. Automatically redirect logins on HTTP to HTTPS now.

5 years ago · 32587d062d
parent 6567acd1dc
commit 32587d062d
1 changed files with 6 additions and 0 deletions
--- a/.htaccess
+++ b/.htaccess
@ -9,6 +9,12 @@ RewriteEngine On
 RewriteCond %{HTTPS} off
 RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

+# HTTPS for authentication pages
+SSLOptions +StrictRequire
+SSLRequireSSL
+SSLRequire %{HTTP_HOST} eq "%{HTTP_HOST}%{REQUEST_URI}"
+ErrorDocument 403 https://%{HTTP_HOST}%{REQUEST_URI}
+
 # Hackerbots Prevention
 RewriteEngine on
 RewriteCond %{HTTP_USER_AGENT} ^ZmEu [OR]