Some files on my server are protected, but only via HTTP, not HTTPS.
So for example
http://www.mysite.com/protectedfile.html—results in a 403
https://www.mysite.com/protectedfile.html—is accessible and can be read as if it wasn\\\\\\\’t protected at all.
First you have to check for your SSL (Secure Sockets Layer) certificate, if you haven’t do it for your site. If does then keep on checking with “Secure Session Cookie with SSLwith your HTTP base url”, their is an possibilities for the middle-attack, the function session_set_cookie_params(...) with the parameter $secure. but sometimes it leaves us to the problem that we loose our session. Please check session whether its secured.
