Admin section popping out of SSL

[LRS]

This started happening today for some unknown reason.

When I am in the admin section, it starts out as SSL but when I choose a different menu, it goes to a non SSL connection.

I did set the admin SSL information as shown below and it has been working in SSL only for about a week now. The only thing I changed since it started doing this was commenting out a line in the fedex shipping module so that all shipping fedex shipping options show along with free shipping. I don't THINK it started doing that after that change, just stating that as the only change done since this started to occur.

This was done:

"NOTE: As of v1.3.x, the Admin area can only secure the "login" page via SSL unless you set the HTTP_SERVER in your "admin/includes/configure.php" to an SSL URL, in which case the entire admin area will be treated as SSL rather than only selected relevant pages. This will be changing during the admin-rewrite phase scheduled for completion sometime after Zen Cart v2.0 is released."

[BlindSide]

So the HTTP_SERVER define in your admin/includes/configure.php begins with https? Could you verify that?

[LRS]

No, just the https server define was set that way. I didn't get it that all four of the defines had to be SSL, but re-reading the instructions now, I see that. Maybe it has been running non SSL all along. It came to my attention when my browser notified me that I sas leaving a secure connection. I had never seen that before so that got me looking. I had assumed I was running the admin all under SSL.

I was also told just now by my hosting support, that it is not recommended to run the entire admin under SSL as it slows it down. If that is so then I guess it doesn't matter and I should leave it that way. Is it recommended to run the entire Admin under SSL or is that up to the individual?

This is what it shows now. With these settings then only the log in in the admin section will be secure, is that correct?

define('HTTP_SERVER', 'http://mysite.com');
define('HTTPS_SERVER', 'https://mysite.com');
define('HTTP_CATALOG_SERVER', 'http://mysite.com');
define('HTTPS_CATALOG_SERVER', 'https://mysite.com');

[DrByte]

Correct.

And the idea of running everything in SSL slowing things down is somewhat true ... however, if you have only one administrator of your site then you'll probably never notice the minor slowdown (fractions of a second).
If you want/need all access to data via your admin to be protected by SSL (recommended IMO), then simply change the URLs as per the instructions.

[LRS]

Thanks!