adding an ssl to admin

[roscoeh]

My shop is setup but how do I enable the ssl on the admin area?

define('ENABLE_SSL', 'true');

ta,


R.

[Ajeh]

Only the login page is secure at the moment ...

[roscoeh]

I do not understand.

[DrByte]

Currently, if you want your entire Admin to be SSL, just set the HTTP_SERVER to use an https address.

[digus]

Currently, if you want your entire Admin to be SSL, just set the HTTP_SERVER to use an https address.

Or, you could just add this to the ".htaccess" file in your admin directory:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

[digus]

Or, you could just add this to the ".htaccess" file in your admin directory:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

OK - Never mind on that. It does work, but has some really strange effects on submitting certain forms when logged in as admin (e.g. SQL patches). Apparently, all of the URLs in the admin section are hard-coded to use http (except for login when set to https). I think DrByte's suggestion is probably the best option for now, though I'm not 100% sure if it will work either.

If you're mainly concerned with a secure login to the admin area, see this post:

http://www.zen-cart.com/forum/showpo...52&postcount=3

[Merlinpa1969]

Actually the EASIEST and correct way is to do as DrByte said and use the https url in ALL 4 defines,

remember though that running the entire admin in ssl may cause speed and bottleneck issues