Logging into the Admin Section Securely?

[soupgfx]

Hi. I have client who keeps asking me how she can log into her admin section securely. At the bottom left hand side of the admin start screen is a little box that warns her that she is, "you are not protected by a secure SSL connection". Even though we have a legit SSL security certificate.

 

Can someone let me know if there is a certain procedure for her to login correctly or am I missing something in the setup process?

 

Thank you for any information on this.

[germ]

Hi. I have client who keeps asking me how she can log into her admin section securely. At the bottom left hand side of the admin start screen is a little box that warns her that she is, "you are not protected by a secure SSL connection". Even though we have a legit SSL security certificate.

 

Can someone let me know if there is a certain procedure for her to login correctly or am I missing something in the setup process?

 

Thank you for any information on this.

Tell her to access the admin with the correct HTTPS URL.

[soupgfx]

Weird... When logging in, it automatically switches to the normal http://www... but after I log in and manually input the "s" after the http it switches to the secure method. It's just weird that it won't stay in https mode while I log in.

 

 

 

Tell her to access the admin with the correct HTTPS URL.

[germ]

Weird... When logging in, it automatically switches to the normal http://www... but after I log in and manually input the "s" after the http it switches to the secure method. It's just weird that it won't stay in https mode while I log in.

The only way I can think of that would explain that is a rewrite rule in a .htaccess file.

[♥mdtaylorlrim]

In /catalog/admin/configure.php change:

 

define('HTTP_SERVER', 'http://www.yourdomain.com');

define('HTTP_CATALOG_SERVER', 'http://www.yourdomain.com');

 

to:

 

define('HTTP_SERVER', 'https://yourdomain.com');

define('HTTP_CATALOG_SERVER', 'https://yourdomain.com');

 

 

Be sure you do not mess with the configure.php in the /catalog/includes/ folder. THEN log in using the proper https://yourdomain.com

[web-project]

In /catalog/admin/configure.php change:

 

define('HTTP_SERVER', 'http://www.yourdomain.com');

define('HTTP_CATALOG_SERVER', 'http://www.yourdomain.com');

 

to:

 

define('HTTP_SERVER', 'https://yourdomain.com');

define('HTTP_CATALOG_SERVER', 'https://yourdomain.com');

 

 

Be sure you do not mess with the configure.php in the /catalog/includes/ folder. THEN log in using the proper https://yourdomain.com

 

after updating the configure.php file, simply add the following:

 

Options +FollowSymLinks
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://yourdomain.com%{REQUEST_URI}

 

to your .htaccess in admin folder and the http protocol will be redirected to https.