SSL on Admin area

[xxkylexx]

Hey,

When you add your SSL URL in the configuration it forces it on the order form, client area, and other needed areas (which is good). However, I notice it isn't forcing it on the admin area? Is this something that is wrong? I would think it would use the SSL in this case...

 

 

Thanks,

Kyle

[xxkylexx]

Any word on this Matt?

[Adam]

Hey,

 

I think its a good idea

 

For a temp. solution or a better solution just add a .htaccess file with the following code.

 

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

 

From,

Adam

[Matt]

If you want to use SSL just enter https in the url. Unlike the client area, there doesn't need to be any switching here between ssl and non-ssl so if you enter https when you first access it all links during that session will be under ssl.

 

Matt

[xxkylexx]

Hey,

 

I think its a good idea

 

For a temp. solution or a better solution just add a .htaccess file with the following code.

 

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

 

From,

Adam

 

That's how I used to do it, but since v3, there is a configuration field in the admin area to add your SSL url. If you use this option, it tends to mess with the above .htaccess code. Just would be nice to force the SSL on the admin area, to ensure the encryption.

 

Kyle