Site maintenance: Sun 15 Nov, from 12:00 UTC, about 4–6 hours. Details

This cutover relies on some testing that is still incomplete so may be cancelled at short notice

Forums / Customization from the Admin / Login to ADMIN not IN HTTPS??

Login to ADMIN not IN HTTPS??

Started by imfsub12 on 9 Jan 2013, 6:14 PM · Views: 807

Results 1 to 9 of 9
9 Jan 2013, 6:14 PM
#1
imfsub12 avatar

imfsub12

Zen Follower

Join Date:
Aug 2008
Location:
Halifax, NS
Posts:
274
Plugin Contributions:
0

Login to ADMIN not IN HTTPS??

I know there is a way when I login to my admin it auto goes to HTTPS

how do i do this?

Thanks

want to be secure.. even if i say to to the HTTP:// it will force it to the HTTPS

i have set this up before on a site 2 years ago but not sure how again

9 Jan 2013, 6:53 PM
#2
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

imfsub12:

I know there is a way when I login to my admin it auto goes to HTTPS

how do i do this?

Thanks

want to be secure.. even if i say to to the HTTP:// it will force it to the HTTPS

i have set this up before on a site 2 years ago but not sure how again

Do you have a SSL certificate installed on your site/server ?

If not, then you need to get one first.

Some people use the host's "shared SSL" and this may be adequate for your needs. My view is that your own cert is better - particularly from a marketing and customer assurance perspective.

To make ADMIN work on SSL, you need to edit /your_admin_directory/includes/configure.php

You may need to change PERMISSIONS on this file. Some hosts force configure files to have CHMOD 0444. It needs to be 0644 at least, before it can be edited.

Changing to HTTPS... instructions are in the file, and you should be able to follow what's needed. There are LOTS of posts on the forum, and there may even be a tutorial on this.

20 years a Zencart User

9 Jan 2013, 7:12 PM
#3
imfsub12 avatar

imfsub12

Zen Follower

Join Date:
Aug 2008
Location:
Halifax, NS
Posts:
274
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

Thanks

I just didn't put them to TRUE..

9 Jan 2013, 7:25 PM
#4
imfsub12 avatar

imfsub12

Zen Follower

Join Date:
Aug 2008
Location:
Halifax, NS
Posts:
274
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

Is there a way to get the Front END https as well so once they come to site it will be https

9 Jan 2013, 7:44 PM
#5
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

imfsub12:

Is there a way to get the Front END https as well so once they come to site it will be https

There is no value in making the front-end https throughout. SSL tends to slow things down a LOT, so zencart is clever enough to know WHEN to use SSL and when to NOT use SSL.

I add a CUSTOM SIDEBOX to the site, telling people it is SSL secure... Thats better than slowing the site down.

SEE AN EXAMPLE
.

20 years a Zencart User

9 Jan 2013, 7:58 PM
#6
imfsub12 avatar

imfsub12

Zen Follower

Join Date:
Aug 2008
Location:
Halifax, NS
Posts:
274
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

ok thanks

We are getting the SSL that turns the Top Link GREEN for extra protrection..

but right now just have a simple ssl cert

9 Jan 2013, 8:01 PM
#7
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: Login to ADMIN not IN HTTPS??

imfsub12:

We are getting the SSL that turns the Top Link GREEN for extra protrection..
Um ... are you aware that from a technology perspective there's no "extra protection" involved with that? SSL is SSL. It's all the guarantees and business verification that you're paying for. All the extra money doesn't actually add any additional security. It might offer a marginal amount of customer bravery/trust just because it's green, but doesn't change the encryption/security level at all.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

9 Jan 2013, 8:30 PM
#8
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

yes... listen to Dr Byte

There is no need to lay out a LOT of extra cash for something you do not need.

The difference between the affordable and the expensive SSL certificates is usually in the way the SSL company adds other layers of security monitoring and reporting. Banks need this level of control. Your site definitely does not need it.

Rather put the money into marketing the business.

20 years a Zencart User

9 Jan 2013, 8:40 PM
#9
imfsub12 avatar

imfsub12

Zen Follower

Join Date:
Aug 2008
Location:
Halifax, NS
Posts:
274
Plugin Contributions:
0

Re: Login to ADMIN not IN HTTPS??

Ok thanks

I just was $20 bucks more - but we need the extra verification to make the clients happy and everyone else on this website..

plus i had a 25% discount that i had ....