Forums / Basic Configuration / Renamed admin folder and lost SSL

Renamed admin folder and lost SSL

Locked

Started by wvasconcelos on 9 Jul 2008, 8:09 PM · Views: 1,417

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
9 Jul 2008, 8:09 PM
#1
wvasconcelos avatar

wvasconcelos

New Zenner

Join Date:
Jan 2008
Location:
San Diego, CA - USA
Posts:
11
Plugin Contributions:
12

Renamed admin folder and lost SSL

I have recently decided to rename my admin folder in order to increase online security but somehow Zen Cart is no longer encrypting pages in the admin area. Authentication is still encrypted but pages in admin are not. I've already changed the configuration.php file in [admin]/includes folder, that is not the problem.
Any idea of what may've happened?
Thanks!

  • WDV -
9 Jul 2008, 8:20 PM
#2
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Renamed admin folder and lost SSL

By default, at this time, only the login is SSL ... the rest of the Admin is not ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

10 Jul 2008, 2:57 PM
#3
wvasconcelos avatar

wvasconcelos

New Zenner

Join Date:
Jan 2008
Location:
San Diego, CA - USA
Posts:
11
Plugin Contributions:
12

Re: Renamed admin folder and lost SSL

Yes, the default behavior is to have only the login screen encrypted but it is possible to encrypt pages individually.

To encrypt the first page in admin we need to change file admin\login.php. Where it says "zen_redirect(zen_href_link(FILENAME_DEFAULT, '', 'NONSSL'));", if we change "NONSSL" to "SSL" it does the trick.

Likewise, the script in admin\includes\boxes\customers_dhtml.php will define five important pages that can be individually encrypted in the admin area such as customers, orders and paypal. Just change "NONSSL" to "SSL" where applicable.

Finally, we can encrypt additional pages by replacing "NONSSL" by "SSL" in pages such as "admin\orders.php" (e.g.: the button "Edit" in Customers/Orders can be encrypted by changing the "zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array ('action')) . 'action=edit', 'NONSSL'));" line.

I should have done my homework before creating this thread. On the other hand I know that other people will find the discussion helpful.

  • WDV -