Note on Features: Some features documented here require an addon, refer to the Feature List for details.
Note about 'Listings': The use of the term "listings" in the user manual can refer to classifieds, classified ads, standard auctions, dutch auctions, reverse auctions, and buy now only.
This shows you the differences between two versions of the page.
startup_tutorial_and_checklist:usability_configuration:setting_up_ssl_https:whole_site [2016/10/18 11:26]
startup_tutorial_and_checklist:usability_configuration:setting_up_ssl_https:whole_site [2018/04/26 19:31] (current)
|Line 1:||Line 1:|
|====== SSL For Whole Site ======||====== SSL For Whole Site ======|
|-||We only suggest that you use https on the sections of the site where a checkbox exists in the SITE SETUP > GENERAL SETTINGS > USE SSL FOR and for the registration processes only unless you have very special circumstances. The above “checkable” sections of the site are the only sites that contain possibly sensitive information to the client browsing your site. The reason to only protect possibly sensitive information areas instead of your whole site is that the use of https pages creates a resource drain on your server and your clients browser. The use of an ssl connection slows down the display of a page as a lot of extra things have to be done by the server and the client browser to start, ensure, maintain and close the ssl connection between the two. This can drastically increase the time your clients see a page that may not have any sensitive information reducing the usability of your site.||+||Of course you first MUST have an SSL certificate installed to your server that covers your site. There is no use doing this without that installed first.|
|-||If you still persist and want to make the whole site https then set these settings to use the ssl url:||+||To turn this on for the whole site check the following settings:|
|-||SITE SETUP > GENERAL SETTINGS > SITE URL||+||SITE SETUP > GENERAL SETTINGS > Secure SSL Site URL|
|-||REGISTRATION SETUP > GENERAL SETTINGS > URL OF REGISTER.PHP FILE||+||REGISTRATION SETUP > GENERAL SETTINGS > SSL URL of register.php file|
|+||Make sure both of those url configurations have https urls for the base file of your site and the registration file. In almost all cases these should be the same as their "non ssl site url" configurations except for the "s" after the "http".|
|+||Once those are correct check the following box:|
|+||SITE SETUP > GENERAL SETTINGS > Use SSL For: All Pages|
|-||AND make sure any absolute url internal linking within your html uses ssl urls also. By default most links are relative ones in the software and default design so take that into consideration. You may need to change a few links within the base design.||+||Checking the above should check all settings below is and the "Force SSL URL" configuration.|
|+||AND make sure any absolute url internal linking within your html uses ssl urls also. By default most links are relative ones in the software and default design so take that into consideration. You may need to change a few links within the base design. The easiest way is to search all text and templates using the following admin tool:|
|+||DESIGN > SITE TEXT SEARCH|
|+||Search for "http:" and link within your site or include files from outside your site. If you find any you must consider making them relative links if local to your site or "https:" if including from outside your site.|
|+||If you are using the SEO addon to rewrite your urls to more friendly ones make sure you rebuild the htaccess file contents just as you did when you first installed it.|
|+||That should take care of all links within the base software.|
|-||Also check all boxes in "Use SSL For" but do not check "Force SSL URL". That's the configuration we've found to work the best.|
|-||Also note to investigate a server side redirect that pushes from http to https when someone comes to your site using http only. There are a number of ways to create that redirect so investigate the best one for you.|