the if not already redirected does not work on logout... why does it think it is a differet site?
}
*/

if ($login_http_or_https == 'https') {
	if ($user->state == 'in') { // if the user is logged in
		$redirectto = 'Location: https://'.$config_urlbase.$_SERVER['REQUEST_URI'].'&switchedtosecure=1'.$passOnSecureSwitch;
		// if the page reffered to by the same site
		if ( '//'.$config_urlbase == substr(str_replace(array('http:','https:'),array('',''),$_SERVER["HTTP_REFERER"]),0,2+strlen($config_urlbase))) {
			if (substr($_SERVER["HTTP_REFERER"],0,5) == 'http:') {
				if ($_GET['switchedtosecure'] == 1) $temp = 0; else header( $redirectto );
			}
		} else { //if the page was reffered to by someone else, or was typed in.
			//if the page was already redirected do nothing, otherwise redirect
			if ($_GET['switchedtosecure'] == 1) $temp = 0; else header( $redirectto );
		}
	} else { // if the user is not logged in
		$redirectto = 'Location: http://'.$config_urlbase.$_SERVER['REQUEST_URI'].'&switchedtoregular=1';
		// if the page reffered to by the same site
		if ( '//'.$config_urlbase == substr(str_replace(array('http:','https:'),array('',''),$_SERVER["HTTP_REFERER"]),0,2+strlen($config_urlbase))) {
			if (substr($_SERVER["HTTP_REFERER"],0,5) == 'https') {
				if ($_GET['switchedtoregular'] == 1) $temp = 0; header( $redirectto );
			}
		} /*else { //if the page was reffered to by someone else, or was typed in.
			//if the page was already redirected do nothing, otherwise redirect
			if ($_GET['switchedtoregular'] == 1) $temp = 0; else header( $redirectto );
		} BREAKS ON LOG OUT IF UNCOMMENTED */
	}
}
?>