The Official Website of AgoraCart and Agora.cgi
AgoraCart.com Demos Download AgoraCart User Manuals & Wiki Gold Members Forum Go Gold Now! Gold Version Memberships

AgoraCart.com

About
Features
Download
Payment Gateways
Send a Donation
Founders Club
BLOG: News & Updates

Showcases & Demos

AgoraCart Demos
Shop Live Stores

Downloads & Add-ons

Gold Version Downloads
DBwizz Database Mgr.
AgoraCart.com Store

Help & Support

User Manuals
Gold Version Users Forum
Gold Version Chat
Tech Support
Certified Agora Pros
Certified Designers
Hire a Freelancer

Gold Version Members

Member Benefits
Join Today!
Gold Members Home
Gold Version Users Forum
Gold Version Chat Rooms
Gold Version Downloads

For Store Owners

Merchant Accounts
Cool Resources
Advertise Here
"Powered by" Logos
Web Hosting Search

Misc.

Contact Us
MEET's Talking Guide
The Ancient Greek Agora






AgoraCart Free User Forums

This is the official FAQ and Cool Tips guide For the AgoraCart shopping Cart software


Official Sponsors of the AgoraCart Project:

       


RegisterSearchFAQLog in
Reply to topic Page 1 of 1
Require SSL for manager.cgi
Author Message
Reply with quote
Post Require SSL for manager.cgi 
I am interested in requiring SSL to access manager.cgi (especially during authentication). My hosting provider makes it possible to use SSL for this, but not to require it (I can also log into the manager without SSL). Is there anything built into AgoraCart (manager.cgi specifically) that can disallow access if the request is not an SSL request?

Thanks in advance,
Jeremy


_________________
Jeremy
View user's profile Send private message Visit poster's website
Reply with quote
Post  
Jeremy,
You can utilize .htaccess to mod-rewrite to the SSL URL or set up a redirect to the SSL URL.


_________________
God Bless!
Bonnie - AgoraCart Moderator

Get a Gold Membership
View user's profile Send private message Send e-mail Visit poster's website AIM Address Yahoo Messenger ICQ Number
Reply with quote
Post  
OK. Thank you for the good ideas. I actually opted to use mod_ssl in my htaccess file in the protected directory because mod_rewrite and the authentication jazz seemed to be clashing. The mod_ssl stuff seems to work nicely. Unfortunately, I now have a new problem, but still related problem.

I am using a shared certification from my hosting provider. As a result my SSL URLs look different than my non-SSL URLs (https://linestoliveby.startlogic.com vs. http://www.linestolivebyvinyl.com). This causes a problem for manager cookies. I think the manager is expecting to locate the cookies using the hostname in the current URL, but they are located via the default store URL, or something like that. Is there somewhere I can configure the location of the manager cookies so that I can have multiple, simultaneous manager sessions and SSL?

Regards,
Jeremy


_________________
Jeremy
View user's profile Send private message Visit poster's website
Display posts from previous:
Reply to topic Page 1 of 1
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum