HTTPS Register/Login

Hi Ray,

Thank you so much for your help on Monday with the shipping problem.

My client has asked whether registration/login for the store can be secure (with https:) - I think one of her smartypants mates brought it to her attention. Obviously, we know the checkout is secured by the sites SSL certificate already.

What do you advise?

Andrew

Is it just a case of changing the relevant links to https, or do I need to do something else

Yes, just change the relevant links to https://... you could go a step further and force it with .htaccess, but if it is easy enough to update the links that is probably enough.

Quick question, which template are the links in for me to change?

TIA
Andrew

They could be anywhere... do a site wide search for "login.php"

If you find it on a lot of pages it might make sense to just do it with a .htaccess file, or even code on the top of the login.php page itself:

<?php

if($_SERVER["HTTPS"] != "on")

{

    header("Location: https://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]);

    exit();

}

?>

Hi Ray,

I found a handy little file in the webassist/plugins directory, called headerlinks.php - was all in there!

Thank you again!

Andrew