Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Questions on SSL


WiseWombat

Recommended Posts

Hi I have a couple of questions on SSL before I go ahead.

 

( 1 ) I will be getting SSL and was wondering which href pages to set ssl on.

( 2) Would it be a good thing to run ssl on the entire website and would this affect it operation or should it only be on critical pages.

( 3 ) What type of ssl should I run on apache 4.0.49 server as I have no idea on this.

( 4 ) Im curious on this one??Is there a need to have ssl if you use a third party payment gateway that uses 128ssl encription because you dont deal in personal credit details?? :-"

 

Thanks for your input: Martin.

( WARNING )

I think I know what Im talking about.

BACK UP BACK UP BACK UP BACK UP

Link to comment
Share on other sites

install the ssl per the host instructions. enable ssl in the store via teh configure.php files, setting ssl to true and making the respective entries in the https server setting.

dont touch anything else, let osCommerce handle all the switching back and forth for ssl. this is long as your host has not mangled it.

no it is not a good thing to run it on the site on every page.

once you get your ssl (which is 128 bit) #3 is mot.

#4 yes, as if i was one of your customers and went to sign up yet there was no ssl for entering my customer data then i would leave immediately.

Link to comment
Share on other sites

install the ssl per the host instructions.  enable ssl in the store via teh configure.php files, setting ssl to true and making the respective entries in the https server setting.

dont touch anything else, let osCommerce handle all the switching back and forth for ssl.  this is long as your host has not mangled it.

no it is not a good thing to run it on the site on every page.

once you get your ssl (which is 128 bit) #3 is mot. 

#4 yes, as if i was one of your customers and went to sign up yet there was no ssl for entering my customer data then i would leave immediately.

Thanks for you comments John which pages or files should I then cover with ssl.?

( WARNING )

I think I know what Im talking about.

BACK UP BACK UP BACK UP BACK UP

Link to comment
Share on other sites

if the host has the server setup properly, oscommerce automatically switches back and forth. you dont need to 'cover them with ssl' as it is done automatically by the server and oscommerce.

only custom pages outsode of oscommerce are ones you would write for ssl or nonssl, depending upon what is going on.

to see what needs to happen, is install the certificate or have your host install the certificate for you.

then go to https://www.mydomain.com and look for the ssl padlock (create an html page here without images, just text). this is assuming it isnt going thru the catalog.

Link to comment
Share on other sites

if the host has the server setup properly, oscommerce automatically switches back and forth.  you dont need to 'cover them with ssl' as it is done automatically by the server and oscommerce.

only custom pages outsode of oscommerce are ones you would write for ssl or nonssl, depending upon what is going on. 

to see what needs to happen, is install the certificate or have your host install the certificate for you.

then go to https://www.mydomain.com and look for the ssl padlock (create an html page here without images, just text).  this is assuming it isnt going thru the catalog.

OK then the site will be covered automaticly between the server and oscommerce being (wisewombat.com.au) I take it?? and any extra html pages outside the catalog will then automaticly Be covered with ssl is that right ??

( WARNING )

I think I know what Im talking about.

BACK UP BACK UP BACK UP BACK UP

Link to comment
Share on other sites

yes, as long as written correctly. osCommerce is already written correctly.  if you make changes then all bets are off.

Thanks John I'll make shore not to make changes. :D

( WARNING )

I think I know what Im talking about.

BACK UP BACK UP BACK UP BACK UP

Link to comment
Share on other sites

Why is it not okay to run ssl on everypage? Just curious. I'm about a month away from looking into that. How hard is it to add ssl after the fact. My webhost automatically installs OSCommerce and as part of the process asks if I want to use it. Can I easily change it later?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...