SSL problems

[Shane78]

Hi

i have a site which has its own SSL cert, i use the SSL for the Admin section of the site.

when i go to the admin section it automatically goes to
https://MYSITE.co.uk/ADMIN/login.php

Which is great, and when i log in it returns the page
https://MYSITE.co.uk/ADMIN/index.php


however.... when i start to use the admin aspect of my site the SSL is not used. For example, if i go to ADMIN > CATALOG > CATAGORIES/PRODUCTS the url drops the SSL and returns
http://MYSITE.co.uk/ADMIN/categories.php

It appears that SSL is only used to log-in and to display the admin index page. Is this normal? or has something gone wrong somewhere?..

Am i wrong in assuming that SSL is used throughout the whole admin section?

All comments welcome
Thanks
Martin

[tino.schlegel]

Yes this is normal.

As of v1.3.x, the Admin area can only secure the "login" page via SSL unless you set the HTTP_SERVER in your "admin/includes/configure.php" to an SSL URL, in which case the entire admin area will be treated as SSL rather than only selected relevant pages. This will be changing during the admin-rewrite phase ...

Read more

[DrByte]

If you want your entire admin to use the HTTPS address, then edit your /admin/includes/configure.php file and set your HTTP_SERVER to the same as your HTTPS_SERVER and your DIR_WS_ADMIN the same as your DIR_WS_HTTPS_ADMIN.

[Shane78]

Cheers DrByte & Tino,

I just wasnt sure if it was supposed to do that.. Thanks for the help!