From 32587d062de09bdc005a2b8bef1ab683a411ab4c Mon Sep 17 00:00:00 2001 From: Yandols ZeonX Date: Sat, 27 Jul 2019 14:58:52 +0800 Subject: [PATCH] Fixed double login prompt on authentication pages such as log viewer. Automatically redirect logins on HTTP to HTTPS now. --- .htaccess | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.htaccess b/.htaccess index 43d71ec..0682fc8 100644 --- a/.htaccess +++ b/.htaccess @@ -9,6 +9,12 @@ RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] +# HTTPS for authentication pages +SSLOptions +StrictRequire +SSLRequireSSL +SSLRequire %{HTTP_HOST} eq "%{HTTP_HOST}%{REQUEST_URI}" +ErrorDocument 403 https://%{HTTP_HOST}%{REQUEST_URI} + # Hackerbots Prevention RewriteEngine on RewriteCond %{HTTP_USER_AGENT} ^ZmEu [OR]