CE Phoenix Cart Forum

Sorry, I have searched and looked at the FAQ area and setup area and cannot find an answer to this
Parts of this site is not secure (such as images)
Also it appears admin is not going to https at all.

Is there instructions anywhere on what needs to be done after the SSL cert in installed?

superche wrote: ↑Mon Mar 27, 2023 6:07 am Parts of this site is not secure (such as images)
Also it appears admin is not going to https at all.

Check and edit your files to ensure https is in the defined constants:
/youradmin/includes/configure.php
/includes/configure.php

That sorta of fixed it @heatherbell but when you just type the domain how do you force it to go to https thats a .httacess rewrite right?

superche wrote: ↑Mon Mar 27, 2023 6:22 am That sorta of fixed it @heatherbell but when you just type the domain how do you force it to go to https thats a .httacess rewrite right?

Host servers differ but that's configured on our host server, there should be no requirement to change your htaccess

I am interested in this issue with images as well. How do we keep our images secure and not accessed directly using a link? I have SSL on my sites but can enter an image URL and view it in my browser. Or is this the normal behaviour?

madruga wrote: ↑Wed Mar 29, 2023 1:07 am I have SSL on my sites but can enter an image URL and view it in my browser. Or is this the normal behaviour?

This is normal behaviour.

Thank you @burt

Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?

madruga wrote: ↑Thu Mar 30, 2023 1:42 pm Thank you @burt

Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?

To secure your images makes sure they are not writeable. Do not have 777 permissions on them. Mine are at 604 which is the standard for my hoster to keep them from being writeable.

I'm not talking about making images writeable. Isn't it possible to make it impossible for images to be viewed directly via a URL? Surely, there must be a way to protect images from being viewed and stolen.

madruga wrote: ↑Thu Mar 30, 2023 1:42 pm Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?

Can you say why would you want to protect images? It seems pointless, but you may of course have a good reason for it. Even google does not protect images;

https://www.google.com/
Image Logo direct: https://www.google.com/images/branding/ ... 2x92dp.png

Having images that can't be accessed in this way, seems like a waste of time and effort.
It is not something that would make phoenix improved in my opinion.