Securing the Whole Site

[lynnetted]

We have determined that we want to secure our whole website. There are many reasons for this, but my boss is unrelenting - we need to secure the entire site.

 

Does anyone know if there is a way to configure PrestaShop so it simply creates links as HTTPS://blah blah blah instead of creating links as HTTP://blah and re-directing them to an HTTPS?

 

Thanks!

Lynnette

[Bazze]

We have determined that we want to secure our whole website. There are many reasons for this, but my boss is unrelenting - we need to secure the entire site.

 

Does anyone know if there is a way to configure PrestaShop so it simply creates links as HTTPS://blah blah blah instead of creating links as HTTP://blah and re-directing them to an HTTPS?

 

Thanks!

Lynnette

 

It seems a bit unnecessary to secure the WHOLE site using HTTPS, but that's up to you. In your TPL files you often use the {$base_dir} to get the base url, instead you can use {$base_dir_ssl} to the HTTPS version.

 

You could also add a directive to your .htaccess file and redirect HTTP requests to the same url but using HTTPS instead.

 

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</IfModule>

Edited August 25, 2012 by Bazze (see edit history)