WebFaction
Community site: login faq

What is the best way to make a drupal, wordpress or other login secure. Can you use https without having to buy a certificate for your domain?

asked 06 Jul '11, 15:03

bradrice
151912
accept rate: 0%


You can use HTTPS without your own certificate - the shared WebFaction certificate will be used. You will receive a name mismatch warning from most browsers, however.

You can obtain a basic certificate at no cost from companies like StartSSL. While probably not really suitable for e-commerce, this would certainly be adequate for your login pages.

Using a certificate requires a dedicated IP address, which is $5.00 per month.

permanent link

answered 06 Jul '11, 15:50

maryh
1.3k7
accept rate: 35%

How would I make backend login only https but forward facing websites non-ssl? I tried clicking the https checkbox on my website, but it made the site require https to see the site.

permanent link

answered 07 Jul '11, 08:05

bradrice
151912
accept rate: 0%

You will need two website records - one with the HTTPS option checked, and another one with HTTPS un-checked. In this way, your site will be available via both HTTP and HTTPS.

Once this is done you can either manually use an HTTPS URL while logging in (a bookmark could help here), update the links on your pages, so that they point to HTTPS, or use some mod_rewrite rules to have some URLs redirected to HTTPS (see this for some sample rules).

(07 Jul '11, 08:13) tie

Thanks tie, that is a great answer.

(07 Jul '11, 08:16) bradrice

I don't see how to add another website to my domain with https. Do I need to create a whole new subdomain to do it? All I see is a checkbox for https that is listed with the domain area of websites.

(07 Jul '11, 12:06) bradrice
1

You create a new website record with the same domain and app, only with HTTPS checked. You do not need to create a separate subdomain.

(07 Jul '11, 15:23) maryh

so I have a domain of bradrice.com. I try adding a new website record to that. It allows me to add it, I point it to my drupal app. I check https and now everything in that domain needs https. I don't see how you can select just a website record to be https?

(07 Jul '11, 15:32) bradrice

You will need to create two website records, both with the bradrice.com domain, both the the drupal app, one with HTTPS checked, one with HTTPS unchecks. With this setup, all URLs for bradrice.com will work with or without HTTPS. You can then use the suggestions given above to ensure that specific URLs are always accessed via HTTPS.

Instructions for creating a new website record are found here: http://docs.webfaction.com/user-guide/websites.html#create-a-website-with-the-control-panel

(07 Jul '11, 15:43) maryh
showing 5 of 6 show 1 more comments

Finally maryh I figured it out. I didn't realize I could create a new entry for bradrice.com. I thought I had to add an application mount point to that entry. Thanks

permanent link

answered 08 Jul '11, 06:05

bradrice
151912
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×63
×40
×27

question asked: 06 Jul '11, 15:03

question was seen: 3,850 times

last updated: 08 Jul '11, 06:05

WEBFACTION
REACH US
SUPPORT
AFFILIATE PROGRAM
LEGAL
© COPYRIGHT 2003-2020 SWARMA LIMITED - WEBFACTION IS A SERVICE OF SWARMA LIMITED
REGISTERED IN ENGLAND AND WALES 5729350 - VAT REGISTRATION NUMBER 877397162
5TH FLOOR, THE OLD VINYL FACTORY, HAYES, UB3 1HA, UNITED KINGDOM