[SoapLady]

I'm working in 4.4.1. I want to force all pages in the admin are to go through https since we collect and view credit card information for manual processing. (Alternatively, I would be okay with viewing just the orders in https).

I've set logins/registrations to https and also checked redirect to http (so all pages don't show in https). That's working, but all admin area pages also redirect to http.

I tried the .htaccess code suggested in the X-Cart Security link posted by Jon to force the admin area to https, added exactly as written (modified for my site) in the admin directory within the xcart directory.

I get the following message from Firefox:

The page isn't redirecting properly
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

In the browser address bar I get the correct URL in https, but with the query string $xid=[idcode]

Any suggestions?

Marie