Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Run Admin on SSL


Mort-lemur

Recommended Posts

Posted

I shouldnt need to ask this, but I have spent ages trying to get my admin running completely on SSL - and I cant seem to manage it without errors! as it is a long time since I have played with the configure files....

 

Is there a way via admin/.htaccess to ensure that the whole of the admin side runs on my SSL?

 

Many thanks

Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Posted

tried running this

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} somefolder
RewriteRule ^(.*)$ https://www.domain.com/somefolder/$1 [R,L]

 

But that is giving me errors as It is drawing the Ui theme for admin from a non SSL area?

Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Posted

In your admin configure file, set the ssl option to true and change the three urls to use https. That will cause ssl to be used once logged in but there is still a security hole because you can use http: to initially connect (before it switches). To fix that, add the following line to the top of the admins .htaccess file. You don't need the lines you added.

SSLRequireSSL

Support Links:

For Hire: Contact me for anything you need help with for your shop: upgrading, hosting, repairs, code written, etc.

All of My Addons

Get the latest versions of my addons

Recommended SEO Addons

Posted

Thanks for that,

 

I had already tried that, but when I try to create a customer using manual order maker, I get a problem with the url as follows:

 

The requested URL /adminname/HTTPS_SERVER/adminname/create_account_process.php was not found on this server.
ie it is adding HTTPS_SERVER/adminname/ to the url

Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Posted

Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Posted

@ Try going to http://your_domain.com/your_admin. You will see that the connection is made and doesn't switch to ssl until after you enter the login. That means your login is transmitted without ssl.

Support Links:

For Hire: Contact me for anything you need help with for your shop: upgrading, hosting, repairs, code written, etc.

All of My Addons

Get the latest versions of my addons

Recommended SEO Addons

Posted

@@Jack_mcs I have included the

define('HTTPS_SERVER', 'https://www.mysite.co.uk');

in my admin/configuration.php file (simply cos its easier to spot there in the future) and also included the code you provided in the post above in my admin/.htaccess - all tight, secure and working now.

 

Many Thanks

Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...