Forced to SSL on login

Permalink
Strangely my concrete installation is forcing SSL on login and I don't recall setting it up to do so! My .htaccess file in my / and /themes/{theme_name} DIRs looks like this:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php/$1 [L]
</IfModule>

Which I think is standard for pretty URLs. Is there anything else I need to be checking, site.php etc?

As there is no SSL on the server it bombs out and so I can't log-in without resetting the password (which does not use SSL).

All help very much appreciated.

 
Remo replied on at Permalink Reply
Remo
Any SSL related parameters in site.php?

There might be another .htaccess file somewhere.. Maybe in a parent directory?

Why do you have a .htaccess file in /themes/{theme_name}? I don't see why this should be useful..
kevinbond replied on at Permalink Reply
Theres nothing in site.php that refers to https. I dont need a .htaccess file in the themes dir?
Remo replied on at Permalink Reply
Remo
no, why should you need another .htaccess file there?

There are lots of options where you could find some ssl related stuff. Apache conf, htaccess files everywhere, every php file could do some checks....

I'd start with digging into the log files or temporary moving the site to another server to see if the problem is causes by something in the code or something in the webserver configuration.