https login but http for regular site...
Posted: Wed Sep 13, 2006 1:34 pm
I'd like to be able to have *one* url for my login and admin area, yet keep a *different url* for my main site.
My web host allows me to use https via a completely different url, for example:
my main website is at:
http://www.example.com/
and I can use https via the following:
https://servername.webhostcompany.com/~example
The problem is, when I go to my admin page using https:
https://servername.webhostcompany.com/~example/admin
it redirects me to:
http://www.mywebsite.com/admin/login.php
thus, loosing my https.
further, if I go to:
https://servername.webhostcompany.com/~ ... /login.php
it doesn't redirect me, and it *appears* that I will get a secure login, but when I clicked login I got the browser warning that the Page was encrypted, but the form submission was going to be unencrypted. Looking at the source for the page, I see a:
in the source, which is causing the login post to go unsecured.
All I want to do is protect my password from sniffers, thus further protecting my website against hacks.
Is there any way to set an admin url differently from the main website?
And if there isn't, can this be added? I'd be willing to help if anyone wants to point me in the right direction.
Thanks.
My web host allows me to use https via a completely different url, for example:
my main website is at:
http://www.example.com/
and I can use https via the following:
https://servername.webhostcompany.com/~example
The problem is, when I go to my admin page using https:
https://servername.webhostcompany.com/~example/admin
it redirects me to:
http://www.mywebsite.com/admin/login.php
thus, loosing my https.
further, if I go to:
https://servername.webhostcompany.com/~ ... /login.php
it doesn't redirect me, and it *appears* that I will get a secure login, but when I clicked login I got the browser warning that the Page was encrypted, but the form submission was going to be unencrypted. Looking at the source for the page, I see a:
in the source, which is causing the login post to go unsecured.
All I want to do is protect my password from sniffers, thus further protecting my website against hacks.
Is there any way to set an admin url differently from the main website?
And if there isn't, can this be added? I'd be willing to help if anyone wants to point me in the right direction.
Thanks.