https login but http for regular site...

For questions and problems with the CMS core. This board is NOT for any 3rd party modules, addons, PHP scripts or anything NOT distributed with the CMS made simple package itself.
Post Reply
wesyah234
Forum Members
Forum Members
Posts: 60
Joined: Tue Mar 07, 2006 4:30 am

https login but http for regular site...

Post by wesyah234 »

I'd like to be able to have *one* url for my login and admin area, yet keep a *different url* for my main site.

My web host allows me to use https via a completely different url, for example:

my main website is at:
http://www.example.com/

and I can use https via the following:
https://servername.webhostcompany.com/~example

The problem is, when I go to my admin page using https:
https://servername.webhostcompany.com/~example/admin
it redirects me to:
http://www.mywebsite.com/admin/login.php

thus, loosing my https.

further, if I go to:
https://servername.webhostcompany.com/~ ... /login.php

it doesn't redirect me, and it *appears* that I will get a secure login, but when I clicked login I got the browser warning that the Page was encrypted, but the form submission was going to be unencrypted.  Looking at the source for the page, I see a:

in the source, which is causing the login post to go unsecured.

All I want to do is protect my password from sniffers, thus further protecting my website against hacks.

Is there any way to set an admin url differently from the main website?
And if there isn't, can this be added?  I'd be willing to help if anyone wants to point me in the right direction.

Thanks.
calguy1000
Support Guru
Support Guru
Posts: 8169
Joined: Tue Oct 19, 2004 6:44 pm

Re: https login but http for regular site...

Post by calguy1000 »

There's an admin url in the config.php
(I think)
Follow me on twitter
Please post system information from "Extensions >> System Information" (there is a bbcode option) on all posts asking for assistance.
--------------------
If you can't bother explaining your problem well, you shouldn't expect much in the way of assistance.
wesyah234
Forum Members
Forum Members
Posts: 60
Joined: Tue Mar 07, 2006 4:30 am

Re: https login but http for regular site...

Post by wesyah234 »

calguy1000 wrote: There's an admin url in the config.php
(I think)
I didn't see it... saw

$config['root_url']

and

$config['admin_dir'] = 'admin';

but nothing about an admin_url...
wesyah234
Forum Members
Forum Members
Posts: 60
Joined: Tue Mar 07, 2006 4:30 am

Re: https login but http for regular site...

Post by wesyah234 »

I'd be happy to look into modifying the code to support this... just looking for someone to confirm that it's not already supported...
wesyah234
Forum Members
Forum Members
Posts: 60
Joined: Tue Mar 07, 2006 4:30 am

Re: https login but http for regular site...

Post by wesyah234 »

Has this been added yet? (ie. support for an admin url in the config file, separate from the main url for the website)
Pierre M.

Re: https login but http for regular site...

Post by Pierre M. »

I like this idea of the content management URL be not the same as the public broadcasting URL. (even if not SSL)
I don't know if CMSms features it yet.
PM
Post Reply

Return to “CMSMS Core”