SSL questions abound

[scottiegirl]

A number of questions:

 

1. peterr, in another thread, stated

You only need to setup a .htaccess file to protect your admin path, Also, rename it (the 'admin' folder) to something else, as an additional protection.

When you rename the 'admin' folder, will all "roads lead to Rome" - meaning will all instances of that referral change automatically or must they all be changed manually? ARE there any referring paths/links?

 

2. My shared web server offers the use of its own SSL digital certificate, linking through their secure domain and using my user name. Where do I (or can I even) change my paths so that my admin will be SSL secured?

 

Thanks!

[FIMBLE]

Hello,

 

SSL & .HTACCESS are two diferent animals

SSL is an encryption tool that scrambles the info, it will not stop any one viewing any particular page

it really just scrambles and transmits your details,

 

,htaccess amongst other things controls the entry to a folder if you set it to, it is linked to a .htpasswd file seperatly stored on your server that contains all your desired usernames and encrypted passwords.

The way it works is when a visitor calls for a page from the "protected folder" they will be presented with the login box, if they fail 3 times they will get the not authorised deafault page [unless you set up a custom one] I know that people suggest you move the admin folder but .htaccess is fairly safe especially to the lower technical hackers, so i would just protect it and save yourself lots of hassle

if you need a program to encrypt your passwords go here, http://www.jadles.co.uk/cgi-bin/htpass.cgi

if you need more help call me!

Nic