Site maintenance: Sun 15 Nov, from 12:00 UTC, about 4–6 hours. Details
This cutover relies on some testing that is still incomplete so may be cancelled at short notice
Started by surlyjake on 28 Sep 2006, 6:49 AM · Views: 2,235
New Zenner
I have my site's shared SSL certificate "working" for the admin section. The first page will appear as "https" but after i click a link in admin... the address bar displays as if i isn't secure. Is it?
:lamo:
Sensei
That is normal. At the present time, the admin secures the login page only.
The rest will be secured during the admin rewrite phase several version releases from now. You can see the schedule on the roadmap pasted at the top of the forum listing.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Zen Follower
In the admin config file, there's an option for HTTP_SERVER and HTTPS_SERVER, where HTTP SERVER has an http:// url, if you change that to https:// then you'll be under SSL for every single page.
Yeah! I'm small! I'm Fluffy! Stick tongue out
New Zenner
if I put the admin folder under my web host's "ssh" section, is it all safe even though it doesn't say https?
Sensei
No.
SSH and SSL are completely different things.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Tell staff why this post should be reviewed.