Zen Cart Logo
Forums / General Questions / HTTPS Not Showing All the Time in Admin

HTTPS Not Showing All the Time in Admin

Locked

Views: 1,524

Results 1 to 4 of 4
This thread is locked. New replies are disabled.
31 Jul 2008, 12:07 AM
#1
griff1324 avatar

griff1324

New Zenner

Join Date:
Feb 2008
Posts:
48
Plugin Contributions:
0

HTTPS Not Showing All the Time in Admin

I noticed that when I go to http://www.mysite.com/admin it redirects me to a https:// page, as it should. However, if I go into the options to configure the store, take a backup of my database, etc. then I lose the https:// and I am accessing a http:// page. Is this normal and is this safe, especially when I am downloading the backup of my database.

Thanks,

Chris

31 Jul 2008, 2:09 AM
#2
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: HTTPS Not Showing All the Time in Admin

Secure for your login so another can not gain access other functions do not require an ssl session and this keeps the connection faster...

What can anyone do with your DB or the config/management things you are doing???

3 Aug 2008, 2:22 AM
#3
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: HTTPS Not Showing All the Time in Admin

Griff1324:

Is this normal
yes, that's normal at the present time.

If you would like to protect every admin page via SSL, edit your admin configure.php file and copy the value from HTTPS_SERVER to the HTTP_SERVER setting. Do the same with your DIR_WS_HTTPS_ADMIN to DIR_WS_ADMIN.

3 Aug 2008, 9:40 AM
#4
azrahn avatar

azrahn

Zen Follower

Join Date:
Jun 2006
Location:
Koh Samui
Posts:
120
Plugin Contributions:
0

Re: HTTPS Not Showing All the Time in Admin

I think it would be desirable if admin panel is completely https.
For instance I am filling in my password for iDeal payment gateway and API signature for PayPal and so on without any encryption.
That are bits of sensitive information i think and should be protected.