title: CakePHP HTTPS Secure payment form
body: <p>Using CakePHP 1.3 we have a booking system for hotel rooms. A check-availability form should bring the user to a secure payment page (https://secure.domain.com/bookings/payment). After making the payment, the user gets a confirmation page (secured is also ok), but from here, any links in our header/footer should take the user back to the non-secured domain (http://domain.com).</p>
  
  <p>Currently we have our SSL UCC Cert set up for the domains <a href="https://secure.domain.com" rel="nofollow">https://secure.domain.com</a> and <a href="https://domain.com" rel="nofollow">https://domain.com</a>. We have also hard coded the check-availability form to run the action <a href="https://secure.domain.com/bookings/payment" rel="nofollow">https://secure.domain.com/bookings/payment</a>. Thus, we can get the user to get in to the HTTPS secured area, but not back out unless we hard code all our links in that section.</p>
  
  <p>Cake's security component is quite confusing and thus I am looking for the best solution to make this happen.</p>
  
  <p>Can Cake's Security component be used for HTTPS payment pages, make life easier, and keep the code more CakePHP standardized? Any other suggestions?</p>