How make sure always HTTPS for a page?

you can use the server variables to look at the referring url to validate if it is using ssl by checking for https.   You could redirect them, but is that just for entering the site or for submiting the data?  if they submit to http, it is already to late to redirect as the data is already there.  

So on the page_load check if the "https" is there and if not do a redirect to the same page but append "https" to the front?

After some research I wrote the below code.  It seems to work well.  See any holes with it?

If Not Request.IsSecureConnection Or Request.Url.ToString.Contains("https://") Then
     ' redirect to https
     Dim strNewUrl As String
     strNewUrl = Request.Url.ToString.Replace("http://", "https://")
     Response.Redirect(strNewUrl)
End If

Select allOpen in new window

where to put those code...please tell me...

form_load of a page, such as checkhttps.aspx