secure submit in admin

[clarocque]

OK I am running MS2.2 on a linux machine with several contributions (HTML editor is one) and I am trying to get it so some parts of the admin area uses my private SSL.

 

I know I can change the 'HTTP_SERVER' to https, but when I do that the entire admin area uses it and when I open any page with the editor I get a warning.

 

Besides some of the people who have to access the site will be on dial-up so SSL will slow them down a lot (no need for some things like adding products).

 

I am trying to find where (or a way) to make certain pages like:

Orders and customer (and related like edits) pages to be secure.

 

I have figured out to change the URL to thos pages so it will open using https, but the update (or edit - sometimes) buttons post the information unsecurely.

 

Is there a place or a way to chnage this (like in the front side).

 

I tried , 'SSL

 

<?php  echo tep_image_submit('button_update.gif', IMAGE_UPDATE, 'SSL'); ?>

but that did not work. IS there somewhere I can change the post/update command so I can have two?

 

Like :

<?php  echo tepS_image_submit('button_update.gif', IMAGE_UPDATE); ?>

and it will use the secure URL.

 

Any help would be appreciated.

[clarocque]

Ok I might have found the code - but not sure how to duplicate it so I can call both secure and unsecure????

 

 

// Output a form
 function tep_draw_form($name, $action, $parameters = '', $method = 'post', $params = '') {
   $form = '<form name="' . tep_output_string($name) . '" action="';
   if (tep_not_null($parameters)) {
     $form .= tep_href_link($action, $parameters);
   } else {
     $form .= tep_href_link($action);
   }
   $form .= '" method="' . tep_output_string($method) . '"';
   if (tep_not_null($params)) {
     $form .= ' ' . $params;
   }
   $form .= '>';

   return $form;
 }

////

 

Found that in admin/includes/html_outpu.php

[nate_02631]

Hi - I came up with a simple contrib to let you access the order and customer sections via SSL... See it here:

 

http://www.oscommerce.com/community/contributions,2274

[clarocque]

Nice job Nate,

 

This will be nice - I did it the long way - I did learn the that HTTPS in fo that is called in the admin area was off on my copy so I chnged that and managed to work though the , 'SSL' fix , but I still had to go in ana change the redirects and links manually - nice job!

 

Wil lkeep this for next time :)