Secure Server usage

[Guest]

Hi All,

 

Let's say my domain address is www.mydomain.com.au, and when I asked my ISP to organise a SSL and shared certificate they gave me the following address as the secured site:

https://shost1.ausat.net/sslmydomain.com.au

 

My question is do I have to physically upload all the folders/files to both site locations and maintain both or does the definitions of HTTPS_SERVER etc and the php scripts just route the sensitive information handling through a different port via the SSL. I really have no idea how it works.

 

Best Regards,

 

Geoff

[AlanR]

Depends on the server. Just try it and if the ssl links fail then you'll know. Some servers have a special folder for secure connections.

[Guest]

Thanks for your reply Alan.

 

What is the experience of most users?

 

There doesn't seem to be any suggestion in any of the docs of having to duplicate the files/folders it was just that I couldn't see how it would work otherwise, but the lack of such documentation implies that it does invariably work.

 

I really would appreciate a more in depth explanation of how osCommerce has been developed to work with SSL as it almost goes without saying that the collection of sensitive data needs to be on a secure server.

 

Best Regards,

 

Geoff Spillane