I have my site's shared SSL certificate "working" for the admin section. The first page will appear as "https" but after i click a link in admin... the address bar displays as if i isn't secure. Is it?
![]()
I have my site's shared SSL certificate "working" for the admin section. The first page will appear as "https" but after i click a link in admin... the address bar displays as if i isn't secure. Is it?
![]()
That is normal. At the present time, the admin secures the login page only.
The rest will be secured during the admin rewrite phase several version releases from now. You can see the schedule on the roadmap pasted at the top of the forum listing.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
In the admin config file, there's an option for HTTP_SERVER and HTTPS_SERVER, where HTTP SERVER has an http:// url, if you change that to https:// then you'll be under SSL for every single page.
Yeah! I'm small! I'm Fluffy! *Stick tongue out*
if I put the admin folder under my web host's "ssh" section, is it all safe even though it doesn't say https?
No.
SSH and SSL are completely different things.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.