SSL login redirect

Question

I placed a bit of php on my login page to redirect using https:, however once a user is logged in, I want them to be redirected to a NON secure page. (http:)
A post in the interaktonline.com forum indicated you can enter full url's in the redirect fields of the email settings | user-levels tab
http://www.interaktonline.com/Products/Bundles/MXKollection/Product-Forum/Details/70652/Se cure+https+in+login.html
This doesn't work for me ... instead it redirects to (ignore spaces):
https://www.domain.com/http: //www.domain.com/
basically appending whatever you put in the redirect fields to the end of your hostname.
Is there a way around this? I don't want to have every page OTHER than my login check to see if it's https, and then redirect back ... that seems too messy.
Thanks!
~shawn

Answer 1

So after a couple of hours hunting, here's what I found:
In the file includes/tng/triggers/tNG_defTrigg.inc.php :
Line 233 tries to take care of the "relative/absolute" path decision:
$relPath = '';
if (isset($tNG->dispatcher) && isset($tNG->dispatcher->relPath)) {
$relPath = KT_makeIncludedURL($tNG->dispatcher->relPath);
(Actually this "decision" is made by KT_makeIncludedURL() in the /includes/common/KT_functions.inc.php file on line 475)
It turns out all of this depends on the dispatcher:
// Make a transaction dispatcher instance
$tNGs = new tNG_dispatcher("../");
If the dispatcher is relative, it will make the redirect relative. IF THE DISPATCHER IS ABSOLUTE, THE REDIRECTS WILL BE AS WELL.
Actually I didn't even need to change the paths in the login settings, I just changed the dispatcher to an absolute URL, like this:
// Make a transaction dispatcher instance
$tNGs = new tNG_dispatcher("http://www.domain.com/");
and everything's gravy!
Cheers!
PS, in case you're interested in the PHP to force SSL for a particular page, you can find it here: http://rackerhacker.com/2007/03/21/forcing-https-with-php/