enable SSL for Admin - advantage?

Results 1 to 4 of 4

12 Jan 2015, 21:03

shags38

Totally Zenned

Join Date:: Jan 2011
Posts:: 1,684
Plugin Contributions:: 0

enable SSL for Admin - advantage?

what is the advantage of enabling SSL for admin?

cheers, Mike

12 Jan 2015, 21:43

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,506
Plugin Contributions:: 173

Re: enable SSL for Admin - advantage?

The purpose of using SSL is to encrypt communication between the browser and the server so that nobody can snoop on the data being transferred across the internet.

So, enabling SSL for your Entire Admin means everything you do in your admin will be visible to you and only you ... including your login password as well as any viewing of customer information, changing settings, setting payment-gateway ID settings, setting shipping-service userIDs and so on.

Plus, if you are using a payment service which collects credit cards on your site, your Admin won't let you enable or use that module if your admin isn't fully protected by SSL.

12 Jan 2015, 21:59

shags38

Totally Zenned

Join Date:: Jan 2011
Posts:: 1,684
Plugin Contributions:: 0

Re: enable SSL for Admin - advantage?

DrByte:

Plus, if you are using a payment service which collects credit cards on your site, your Admin won't let you enable or use that module if your admin isn't fully protected by SSL.

Thanks Doc for the response, I assumed as much but it is the last one that had me wondering - I have been using PayPalPro with no issues with credit cards, I suppose you are talking about other payment gateways?

cheers, Mike
p.s. Why is it that enabling SSL isn't just enable SSL period rather than selecting catalogue and/or admin?

13 Jan 2015, 03:33

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,506
Plugin Contributions:: 173

Re: enable SSL for Admin - advantage?

shags38:
I have been using PayPalPro with no issues with credit cards, I suppose you are talking about other payment gateways?

No, PayPal is included ... but you're using an outdated version of Zen Cart which didn't enforce that.

shags38:
Why is it that enabling SSL isn't just enable SSL period rather than selecting catalogue and/or admin?

... because you have 2 configure.php files: one for the admin and one for the catalog. (We're working on simplifying those files for v1.6)