Xxx.com Or Www.xxx.com And Ssl

[toptiara]

Hi folks,

 

As part of my store revamp (a lot of the old stuff broke when I migrated after changing host), I took up an SSL certificate. The certificate is allocated to toptiara.com, rather than www.toptiara.com, which I believe is the norm.

 

As I didn’t want to risk anything breaking, I decided to change my config so both the http and https lines point to ‘toptiara.com’ rather than ‘www.toptiara.com’

 

I’ve uploaded my site and all appears to work ok, but I have a couple of questions.

 

Firstly, is this going to cause me any problems for any reason? Obviously all pages which were previously indexed will no longer work, but that was going to be the case anyway as I revamped everything and product id’s will have changed etc (reloaded my database)

I have noticed that a number of hits I am taking on my site are being redirected (as per my SEO contribution which points them to a cookie page – I need to change that incidentally), although I am seeing traffic visiting the running pages.

 

Secondly I have just started reading about some changes which can be made to htaccess to do with rewrites. Should I bother with this at all? I don’t have an understanding of how these work at present, although if it would be beneficial I will learn!

 

Many thanks

[Jack_mcs]

See this thread.

 

Jack

[toptiara]

See this thread.

 

Jack

 

 

Thanks :)

 

So, I now have index.php permanently redirecting to root, so thats good.

 

I also have any inbound traffic directed from www.toptiara.com to toptiara.com which is also what I was after.

 

Now I'm trying to address the administration area where I want to ensure any activity is addressed through SSL for security.

 

At present my HTACCESS file for the admin area contains only info for log in and password, so I want to redirect any non HTTPS traffic to HTTPS

 

Would this work? I don't know if this would work or not as there is a reference to {HTTP_HOST} in there

 

 

RewriteCond %{HTTP_HOST} ^http://mydomain\.com/admin

RewriteRule ^(.*)$ https://www.mydomain.com/admin/$1 [R=permanent,L]

 

RewriteCond %{HTTP_HOST} ^http://www.mydomain\.com/admin

RewriteRule ^(.*)$ https://.mydomain.com/admin/$1 [R=permanent,L]

 

I'm trying to redirect all traffic to the secured admin area, regardless of whether the attempt was made via www or not.

 

Thanks

[Jack_mcs]

No, that would be after the login is required I think. I suggest just changing the links in the admin/includes/configure.php file to all https. When you initially go to your admin and see the login dialog, it will not be secure. But that doesn't matter since there is nothing to secure there. Once you are logged in, admin will switch to secure mode and everything after that will use the secure link.

 

Jack