Secure HTTPS to WHMCS

[davidt]

I wondered if there is a way to require, from within WHMCS admin, a secure https connection when accessing the WHMCS Admin area.

 

I know that in Setup/General Settings/General that I can add in the https path, and I believe this makes it so that for all links sent to clients to access their billing that they connect via https (is this correct?), but I thought it would be helpful to be sure I am always connecting to the admin via https when not thinking of it.

 

Thanks

[davidt]

Actually to update that, I see that when I go to login to my WHMCS Admin area that I am logging in at an https address, but once I get logged in, the url changes to a non-secure connection. This is the problem. How do I change this so that it continues to to say secure?

 

Thanks,

[cpoalmighty]

You have to edit your .htacess within the sub domain where your WHMCS is installed to include this code

 

# FORCE SSL ON THIS DOMAIN 
RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteCond %{REQUEST_URI} *subdomin listed here ie my, client etc* 
RewriteRule ^(.*)$ https://www.yourdomain.com/subdomain/$1 [R,L]

 

This will force anyone using your WHMCS to use it in the https. Hope this helps

[WHMCS John]

It's much easier than that, just enable the Setup > General Settings > Security tab > Admin Force SSL Access option.

[davidt]

Is that a new function added after WHMCS 4.1.2? Because that is the version I have and don't see that.

[Lee3155]

Is that a new function added after WHMCS 4.1.2? Because that is the version I have and don't see that.

 

You should really upgrade your WHMCS installation. Not doing this opens your installation to bugs and errors that have been fixed in recent versions.

 

- Lee

[NixDot]

I agree with what Lee said, also upgrading your installation really could give you some handy features, many things are much easier to find/configure in .2.x compared to .1.x.