Https://

RedandBlue · #1 05-27-2010, 11:20 AM

How to enable https:// for the website.
I have a ssl and installed it.

but when i type https://mydomain.com
it is redirecting to http://mydomian.com

but for login pages and cart page it is in working fine.

thanks

Shamun · #2 05-27-2010, 12:11 PM

General settings -> Security settings

Use HTTPS for users' login and registration : Checked
Use secure login form on a separate page (HTTPS) : Checked or unchecked
Do not redirect customers from HTTPS to HTTP : Checked

wgb524 · #3 06-15-2010, 09:46 AM

How do I make sure the admin login screen is in https?

balinor · #4 06-15-2010, 09:52 AM

Make sure your bookmark is https

Shamun · #5 06-15-2010, 05:53 PM

There's a setting somewhere in the setting area on X-cart which will force SSL on all pages with login. Enable that and "dont redirect from HTTPS to HTTP" and then the admin form can only be accessed via HTTPS.

Edit:
Now that I think about it, there's also a setting to force HTTPS for admin login only... can't check currently.

Jon · #6 06-16-2010, 11:32 AM

See item # 7 at X-Cart Security.

SoapLady · #7 10-10-2010, 04:07 PM

I'm working in 4.4.1. I want to force all pages in the admin are to go through https since we collect and view credit card information for manual processing. (Alternatively, I would be okay with viewing just the orders in https).

I've set logins/registrations to https and also checked redirect to http (so all pages don't show in https). That's working, but all admin area pages also redirect to http.

I tried the .htaccess code suggested in the X-Cart Security link posted by Jon to force the admin area to https, added exactly as written (modified for my site) in the admin directory within the xcart directory.

I get the following message from Firefox:

The page isn't redirecting properly
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

In the browser address bar I get the correct URL in https, but with the query string $xid=[idcode]

Any suggestions?

Marie

balinor · #8 10-10-2010, 04:08 PM

Quote:

we collect and view credit card information for manual processing.

Umm...you realize it is basically illegal to do that now, right?

SoapLady · #9 10-10-2010, 04:28 PM

Yeah, I realize. For the moment we are collecting the credit card info, processing it securely in-house and then deleting the data from the x-cart database.

Marie