|
What is the best way to make a drupal, wordpress or other login secure. Can you use https without having to buy a certificate for your domain? |
|
You can use HTTPS without your own certificate - the shared WebFaction certificate will be used. You will receive a name mismatch warning from most browsers, however. You can obtain a basic certificate at no cost from companies like StartSSL. While probably not really suitable for e-commerce, this would certainly be adequate for your login pages. Using a certificate requires a dedicated IP address, which is $5.00 per month. |
|
How would I make backend login only https but forward facing websites non-ssl? I tried clicking the https checkbox on my website, but it made the site require https to see the site. You will need two website records - one with the HTTPS option checked, and another one with HTTPS un-checked. In this way, your site will be available via both HTTP and HTTPS. Once this is done you can either manually use an HTTPS URL while logging in (a bookmark could help here), update the links on your pages, so that they point to HTTPS, or use some mod_rewrite rules to have some URLs redirected to HTTPS (see this for some sample rules). Thanks tie, that is a great answer. I don't see how to add another website to my domain with https. Do I need to create a whole new subdomain to do it? All I see is a checkbox for https that is listed with the domain area of websites. 1
You create a new website record with the same domain and app, only with HTTPS checked. You do not need to create a separate subdomain. so I have a domain of bradrice.com. I try adding a new website record to that. It allows me to add it, I point it to my drupal app. I check https and now everything in that domain needs https. I don't see how you can select just a website record to be https? You will need to create two website records, both with the bradrice.com domain, both the the drupal app, one with HTTPS checked, one with HTTPS unchecks. With this setup, all URLs for bradrice.com will work with or without HTTPS. You can then use the suggestions given above to ensure that specific URLs are always accessed via HTTPS. Instructions for creating a new website record are found here: http://docs.webfaction.com/user-guide/websites.html#create-a-website-with-the-control-panel
showing 5 of 6
show all
|
|
Finally maryh I figured it out. I didn't realize I could create a new entry for bradrice.com. I thought I had to add an application mount point to that entry. Thanks |