Mort-lemur Posted December 29, 2013 Posted December 29, 2013 I shouldnt need to ask this, but I have spent ages trying to get my admin running completely on SSL - and I cant seem to manage it without errors! as it is a long time since I have played with the configure files.... Is there a way via admin/.htaccess to ensure that the whole of the admin side runs on my SSL? Many thanks Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.
Mort-lemur Posted December 29, 2013 Author Posted December 29, 2013 tried running this RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} somefolder RewriteRule ^(.*)$ https://www.domain.com/somefolder/$1 [R,L] But that is giving me errors as It is drawing the Ui theme for admin from a non SSL area? Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.
Jack_mcs Posted December 29, 2013 Posted December 29, 2013 In your admin configure file, set the ssl option to true and change the three urls to use https. That will cause ssl to be used once logged in but there is still a security hole because you can use http: to initially connect (before it switches). To fix that, add the following line to the top of the admins .htaccess file. You don't need the lines you added. SSLRequireSSL Support Links: For Hire: Contact me for anything you need help with for your shop: upgrading, hosting, repairs, code written, etc. All of My Addons Get the latest versions of my addons Recommended SEO Addons
Mort-lemur Posted December 29, 2013 Author Posted December 29, 2013 Thanks for that, I had already tried that, but when I try to create a customer using manual order maker, I get a problem with the url as follows: The requested URL /adminname/HTTPS_SERVER/adminname/create_account_process.php was not found on this server. ie it is adding HTTPS_SERVER/adminname/ to the url Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.
Mort-lemur Posted December 29, 2013 Author Posted December 29, 2013 ahhhh apparently this is a bug - discussed here : http://www.oscommerce.com/forums/topic/391539-create-account-order-maker-for-osc231-v30-error-404/ with another solution here: http://www.oscommerce.com/forums/tracker/issue-557-ssl-links-in-the-admin-fail-if-given-ssl-connection/ all working on SSL now. Thanks Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.
♥GLWalker Posted December 29, 2013 Posted December 29, 2013 Ive aways just input the HTTP_SERVER path as https in the configuration file and has worked out fine. Follow the community build: BS3 to osCommerce Responsive from the Get Go! Check out the new construction: Admin Gone to Total BS!
Jack_mcs Posted December 29, 2013 Posted December 29, 2013 @ Try going to http://your_domain.com/your_admin. You will see that the connection is made and doesn't switch to ssl until after you enter the login. That means your login is transmitted without ssl. Support Links: For Hire: Contact me for anything you need help with for your shop: upgrading, hosting, repairs, code written, etc. All of My Addons Get the latest versions of my addons Recommended SEO Addons
Mort-lemur Posted December 29, 2013 Author Posted December 29, 2013 @@Jack_mcs I have included the define('HTTPS_SERVER', 'https://www.mysite.co.uk'); in my admin/configuration.php file (simply cos its easier to spot there in the future) and also included the code you provided in the post above in my admin/.htaccess - all tight, secure and working now. Many Thanks Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.