1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Installed SSL, how do I secure checkout page?

Discussion in 'Security' started by FloridaClay, Feb 21, 2012.

  1. #1
    I have purchased an SSL certificate and the host uploaded it to the server. I'm no expert on this, but I can now visit the site with both 'http' and 'https'. The idea was to secure the checkout page but not the other pages. When I mentioned this to my host, he said I need to:

    So if you want your checkout page to be secured, you will need to link to it with a preceding https://, or you will need to get with the script developer to find out how to enable https support for the script. Another alternative is to conduct the entire site over HTTPS which has it's benefits and pitfalls.

    I don't want to cut the entire site over to https, so how do I secure the checkout page if I have a Magento site?
     
    FloridaClay, Feb 21, 2012 IP
  2. dayvo

    dayvo Active Member

    Messages:
    585
    Likes Received:
    52
    Best Answers:
    1
    Trophy Points:
    55
    #2
    you might be able to do with with .htaccess - i dont know magento, whats the link you are trying to secure? is it something simple like domain.com/checkout.php or is it more like domain.com/product.php?id=checkout (for example)
     
    dayvo, Feb 24, 2012 IP
  3. samirj09

    samirj09 Well-Known Member

    Messages:
    335
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    125
    #3
    samirj09, Feb 24, 2012 IP
  4. StormInternet

    StormInternet Peon

    Messages:
    46
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Hi,

    This is possible with URL Rewrite. There is no need to use https:// for main web site every time a user access it. You can redirect checkout page to https:// keeping other pages at http://
    You can use ISAPI Rewrite for this which is much more easy to implement.
     
    StormInternet, Feb 26, 2012 IP
  5. FloridaClay

    FloridaClay Active Member

    Messages:
    284
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    58
    #5
    Thanks for the information everyone.

    @ dayvo: The page is http://domain.com/checkout/onepage/

    @samirj09: Thank you for the link but I don't exactly understand the tutorial. What if there are multiple pages that I want secured? The page appears to only allow one page entry?

    @ StormInternet: Thank you for the comment but you are way over my head. I wouldn't even know where to begin with that information.
     
    FloridaClay, Feb 26, 2012 IP
  6. simona86

    simona86 Member

    Messages:
    141
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    28
    #6
    To secure the checkout etc, go to admin panel > system > settings >server > use SSL:yes

    - Did you do this though, and find that checkout still wasn't secured?

    If even you can't solve your problem then try this http://answers.ssl.com/ . Hope this information helps you.
     
    simona86, Mar 16, 2012 IP