Page 1 of 1

https login but http for regular site...

Posted: Wed Sep 13, 2006 1:34 pm
by wesyah234
I'd like to be able to have *one* url for my login and admin area, yet keep a *different url* for my main site.

My web host allows me to use https via a completely different url, for example:

my main website is at:
http://www.example.com/

and I can use https via the following:
https://servername.webhostcompany.com/~example

The problem is, when I go to my admin page using https:
https://servername.webhostcompany.com/~example/admin
it redirects me to:
http://www.mywebsite.com/admin/login.php

thus, loosing my https.

further, if I go to:
https://servername.webhostcompany.com/~ ... /login.php

it doesn't redirect me, and it *appears* that I will get a secure login, but when I clicked login I got the browser warning that the Page was encrypted, but the form submission was going to be unencrypted.  Looking at the source for the page, I see a:

in the source, which is causing the login post to go unsecured.

All I want to do is protect my password from sniffers, thus further protecting my website against hacks.

Is there any way to set an admin url differently from the main website?
And if there isn't, can this be added?  I'd be willing to help if anyone wants to point me in the right direction.

Thanks.

Re: https login but http for regular site...

Posted: Wed Sep 13, 2006 2:39 pm
by calguy1000
There's an admin url in the config.php
(I think)

Re: https login but http for regular site...

Posted: Wed Sep 13, 2006 5:28 pm
by wesyah234
calguy1000 wrote: There's an admin url in the config.php
(I think)
I didn't see it... saw

$config['root_url']

and

$config['admin_dir'] = 'admin';

but nothing about an admin_url...

Re: https login but http for regular site...

Posted: Thu Sep 14, 2006 1:26 pm
by wesyah234
I'd be happy to look into modifying the code to support this... just looking for someone to confirm that it's not already supported...

Re: https login but http for regular site...

Posted: Mon Jan 29, 2007 6:05 pm
by wesyah234
Has this been added yet? (ie. support for an admin url in the config file, separate from the main url for the website)

Re: https login but http for regular site...

Posted: Wed Jan 31, 2007 10:23 pm
by Pierre M.
I like this idea of the content management URL be not the same as the public broadcasting URL. (even if not SSL)
I don't know if CMSms features it yet.
PM