Page 2 of 2 FirstFirst 12
Results 11 to 15 of 15
  1. #11
    Join Date
    Sep 2010
    Posts
    34
    Plugin Contributions
    0

    Default Re: Admin - if SSL enabled, should every Admin page be in SSL?

    Hi BrByte,
    thanks for that, sorry for the long delay in replying, I must not have ticked the email notification thingy, if I understand you right, you say i should change this (see third line) :

    define('HTTP_SERVER', 'http://www.mywebsite.co.uk');
    define('HTTPS_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTP_CATALOG_SERVER', 'http://www.mywebsite.co.uk'); < change part of this line>
    define('HTTPS_CATALOG_SERVER', 'https://www.mywebsite.co.uk');

    changed below:

    define('HTTP_SERVER', 'http://www.mywebsite.co.uk');
    define('HTTPS_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTP_CATALOG_SERVER', 'https://www.mywebsite.co.uk'); < change part of this line, changed the http to https>
    define('HTTPS_CATALOG_SERVER', 'https://www.mywebsite.co.uk');

    is this right?

    i must say the instruction is not clear on this if it is the case. thanks for spotting it & thanks for your help in this as well.

    regards,

    ed

  2. #12
    Join Date
    Jan 2004
    Posts
    58,246
    Blog Entries
    3
    Plugin Contributions
    106

    Default Re: Admin - if SSL enabled, should every Admin page be in SSL?

    No. This whole thread is about the ADMIN, right? So, in your admin configure.php file, HTTP_SERVER is the path used for your Admin pages. So, to secure your Admin, you need to make your HTTP_SERVER be the valid https URL. Basically, telling/tricking the system into always using https because even for http requests you've given it an https address to use.

    The "line 3" that you mentioned is for anything the Admin code needs to reference in the "catalog", also known as "storefront" or "store" or "non-admin" part of your site. Touching that value is mostly meaningless in this context.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donations always welcome: www.zen-cart.com/donate

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #13
    Join Date
    Sep 2010
    Posts
    34
    Plugin Contributions
    0

    Default Re: Admin - if SSL enabled, should every Admin page be in SSL?

    so what do I do? i am confused now, where should I make changes....

  4. #14
    Join Date
    Aug 2005
    Posts
    26,014
    Plugin Contributions
    9

    Default Re: Admin - if SSL enabled, should every Admin page be in SSL?

    You posted
    Code:
    define('HTTP_SERVER', 'http://www.mywebsite.co.uk');
    define('HTTPS_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTP_CATALOG_SERVER', 'https://www.mywebsite.co.uk'); 
    define('HTTPS_CATALOG_SERVER', 'https://www.mywebsite.co.uk');
    And you need this
    Code:
    define('HTTP_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTPS_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTP_CATALOG_SERVER', 'https://www.mywebsite.co.uk');
    define('HTTPS_CATALOG_SERVER', 'https://www.mywebsite.co.uk');
    Quote Originally Posted by DrByte
    you need to make your HTTP_SERVER be the valid https URL
    Zen-Venom Get Bitten
    Get Your Business Found

  5. #15
    Join Date
    Sep 2010
    Posts
    34
    Plugin Contributions
    0

    Default Re: Admin - if SSL enabled, should every Admin page be in SSL?

    Hi Kobra,
    thanks for that, changed & works. Part of the problem was that the changes were not sticking due to the file permissions, all good now, thank you very much!

    best regards,

    ed

 

 
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Should I go for dedicated SSL or free shared SSL? What's the deal?
    By calvinrobinson in forum General Questions
    Replies: 3
    Last Post: 28 Oct 2010, 03:00 PM
  2. SSL issue in admin page
    By coolaim2002 in forum General Questions
    Replies: 1
    Last Post: 4 May 2010, 06:10 AM
  3. can't login to admin after SSL enabled
    By jonathanbee in forum Basic Configuration
    Replies: 2
    Last Post: 18 Feb 2008, 01:50 AM
  4. SSL on every page problem
    By Rotkale in forum Installing on a Linux/Unix Server
    Replies: 0
    Last Post: 9 Jan 2007, 10:11 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •