Question about limiting SSL to certain pages

[celshader]

I am doing my first oscommerce site without using Paypal for credit cards so I need to install an SSL certificate to secure my sites connection to the payment gateway.

I have done a LOT of custom programming on this site and am now not sure about whether or not I may get 'insecure item' warnings when I install the SSL.

I am wondering as to whether it may be possible to ONLY have the SSL active for the checkout_payment, checkout_confirmation, and checkout_success pages.

Would they then need to be in a subdomain?

I've noticed a lot of sites seem to only have SSL active on the payment pages and then its often in a subdomain such as secure.mysite.com.

 

Thank you in advance for any help.

[Jack_mcs]

To be clear, you don't need ssl for paypal since they have their own cert. Although you still should have it since the customers data would not be secure.

 

Oscommerce handles the switching in and out of secure mode automatically. You don't need to do anything special other than setup the includes/configure.php file.

 

Non-secure item warnings are caused by un-secured links on the page to some other domain. You can add code to programatically remove those links if they cause a problem, or just change them to https if possible.

 

Jack