Zen Cart Logo
Forums / Basic Configuration / Renamed admin folder and lost SSL

Renamed admin folder and lost SSL

Locked

Views: 1,415

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
9 Jul 2008, 8:09 PM
#1
wvasconcelos avatar

wvasconcelos

New Zenner

Join Date:
Jan 2008
Location:
San Diego, CA - USA
Posts:
11
Plugin Contributions:
12

Renamed admin folder and lost SSL

I have recently decided to rename my admin folder in order to increase online security but somehow Zen Cart is no longer encrypting pages in the admin area. Authentication is still encrypted but pages in admin are not. I've already changed the configuration.php file in [admin]/includes folder, that is not the problem.
Any idea of what may've happened?
Thanks!

9 Jul 2008, 8:20 PM
#2
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Renamed admin folder and lost SSL

By default, at this time, only the login is SSL ... the rest of the Admin is not ...

10 Jul 2008, 2:57 PM
#3
wvasconcelos avatar

wvasconcelos

New Zenner

Join Date:
Jan 2008
Location:
San Diego, CA - USA
Posts:
11
Plugin Contributions:
12

Re: Renamed admin folder and lost SSL

Yes, the default behavior is to have only the login screen encrypted but it is possible to encrypt pages individually.

To encrypt the first page in admin we need to change file admin\login.php. Where it says "zen_redirect(zen_href_link(FILENAME_DEFAULT, '', 'NONSSL'));", if we change "NONSSL" to "SSL" it does the trick.

Likewise, the script in admin\includes\boxes\customers_dhtml.php will define five important pages that can be individually encrypted in the admin area such as customers, orders and paypal. Just change "NONSSL" to "SSL" where applicable.

Finally, we can encrypt additional pages by replacing "NONSSL" by "SSL" in pages such as "admin\orders.php" (e.g.: the button "Edit" in Customers/Orders can be encrypted by changing the "zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array ('action')) . 'action=edit', 'NONSSL'));" line.

I should have done my homework before creating this thread. On the other hand I know that other people will find the discussion helpful.