https question

nissangtr · #1 10-10-2007, 06:49 PM

Hi,

I'm not very familiar with https/ssl. If I get a private ssl, and put a php file in the https folder, will I still be able to access files above the root folder from the php file?

For example, if I have a http://domain.com/get.php I can use get.php to access /home/domain.com/private/files, will it work the same if I put get.php in httpS://domain.com/get.php ?

Also, if I have a login.php file with variables login.php?username=enterusername&password=enterpas s , does putting the login.php file in https help prevent the username and password variables/input from being displayed in the url ?

I want a way to secure user login and I know using https/ssl is the common way to go, but I've never used it before so am not sure how to it works compared to regular http.

Thanks for any help

slapshotw · #2 10-10-2007, 06:58 PM

You don't want to keep a separate https folder usually. Just keep everything in your same public_html, and have the links to some areas be to https (or use .htaccess to force the connection to use https--you can find the syntax for this by searching the forum).

Most everything you do on http you do the same way on https. Just make sure you know that a certificate bought for www.domain.com isn't also valid for just domain.com, so be careful about your links (and again, you can use .htaccess to force people to www). https really happens after php and all that is processed, and is just a different way for your information to go back and forth between the browser and the server.

nissangtr · #3 10-10-2007, 07:31 PM

Quote:

Just keep everything in your same public_html, and have the links to some areas be to https

Oh, so http and https can be used to access the same files in the public_html folder ? I thought http and https are set to use different folders. If so, how would I create folders/files that can only be accessed by http or only accessed by https ?

Thanks again.

esl · #4 10-10-2007, 07:35 PM

Quote:

Originally Posted by nissangtr

Oh, so http and https can be used to access the same files in the public_html folder ? I thought http and https are set to use different folders. If so, how would I create folders/files that can only be accessed by http or only accessed by https ?

Thanks again.

Yes, http and https can both be used to access the public_html directory with a valid SSL certificate.

to HG!

slapshotw · #5 10-10-2007, 07:57 PM

Quote:

Originally Posted by nissangtr

If so, how would I create folders/files that can only be accessed by http or only accessed by https ?

Use .htaccess to force it on or off in certain areas. Generally you don't want to force it off, just on.

gwyneth · #6 10-10-2007, 08:11 PM

Quote:

Originally Posted by nissangtr

Oh, so http and https can be used to access the same files in the public_html folder ?

Think of a house on a corner. Doors on each street but they enter the same house. Same content, different address.

esl · #7 10-10-2007, 08:12 PM

Quote:

Originally Posted by gwyneth

Think of a house on a corner. Doors on each street but they enter the same house. Same content, different address.

LOL, you are good at analogies!

nissangtr · #8 10-10-2007, 08:59 PM

Ok, I get how it works now!

Thanks everyone !

gwyneth · #9 10-10-2007, 09:18 PM

Quote:

Originally Posted by esl

LOL, you are good at analogies!

Thanks! Not everyone here appreciates them.

esl · #10 10-10-2007, 09:36 PM

Quote:

Originally Posted by gwyneth

Thanks! Not everyone here appreciates them.

I think the problem is not everyone here understands them.

They are very helpful is the person reading them has logic skills.

dkconst · #11 10-10-2007, 10:11 PM

Quote:

Originally Posted by esl

I think the problem is not everyone here understands them.

They are very helpful is the person reading them has logic skills.

Well 90% of the readers here are probably going "Huh?!?"

secure · #12 10-11-2007, 03:37 AM

Quote:

Originally Posted by dkconst

Well 90% of the readers here are probably going "Huh?!?"

LOL, not only that you have good analogy and logic, you've got a good sense of humor too! Most people I know don't have mixed logic and humor.

rolewski · #13 04-21-2008, 03:52 PM

Hello there,

I have to use an image(logo) for PayPal from secure location, how I can do it on HG?

Please give me step by step non-programmer explanation how to set up https://mydomain.com/images/logo_for_paypal.jpg link

Thanks

M.

slapshotw · #14 04-21-2008, 05:26 PM

Try this link-- more options on the right:
https://www.paypal.com/us/cgi-bin/we...kLogos-outside

All those images are using https.

Goddess Dix · #15 04-21-2008, 08:37 PM

Quote:

Originally Posted by gwyneth

Thanks! Not everyone here appreciates them.

i've often wondered if you didn't have a background in real estate or something, gwyn. you seem to favor building analogies.

rolewski · #16 04-21-2008, 11:08 PM

Quote:

Originally Posted by slapshotw

Try this link-- more options on the right:
https://www.paypal.com/us/cgi-bin/we...kLogos-outside

All those images are using https.

In oposite, those are logos of paypal to put in my website, I need my logo to put in paypal website (where you generate charge), please check the sample link on my original post.

thx

M.

striddy · #17 04-21-2008, 11:29 PM

Quote:

Originally Posted by rolewski

In oposite, those are logos of paypal to put in my website, I need my logo to put in paypal website (where you generate charge)

Firstly, do you have a SSL certificate? HG has a free shared which you can use, but that shows your shared IP not domain name. Or you can purchase your own which will show your domain name.

Secondly, SSL needs to be is installed (if you purchased your own). Contact HG support for this.

Thirdly, to implement SSL, just use the link as you showed in your post when setting up your Paypal header image.

For more info, check Paypal Website Payments Guide PDF (beware 4.5Mb link)

https://www.paypalobjects.com/WEBSCR...ationGuide.pdf

capson · #18 10-27-2010, 03:50 PM

I had the same problem with IE showing a warning message on Paypal checkout when I used my custom logo on Paypal checkout page that my logo was not using SSL/HTTPS.

What you do is this. All Hostgator accounts have two URL's.

1.

Code:

http://www.YOURDOMAIN.com

and

2.

Code:

https://SERVERNAME.hostgator.com/~USERNAME

As you can see, the first does not use SSL and the second does. It uses the shared SSL which is free. The servername is something like GATOR123. You can find your servername in the cPanel, at the bottom left in the menu. Your username is the same username you use to login to your cPanel. So the SSL URL would look something like this:

Code:

https://gator123.hostgator.com/~capson/

Now to use your custom Paypal logo, just put this in your Paypal account:

Code:

https://gator123.hostgator.com/~capson/images/paypal_logo.jpg

And since you are not using this SSL URL for other than your Paypal custom logo, you don't have to worry about your customers seeing a not so pretty URL.

ericpepin · #19 12-29-2010, 03:45 AM

Quote:

Originally Posted by gwyneth

Think of a house on a corner. Doors on each street but they enter the same house. Same content, different address.

Yes nice answer its just a different way to access the same file. I think http:// and https:// are same destination files folder Thanks.