Security in general

[newshopbloke]

Hi all,

Cannot believe a forum search showed nothing for this. I do try before posting questions.

I have no additional security or third man, is it wise to have the whole lot - ssl and third man ?

Thanks

Michael

[Duncan Rounding]

You don't need SSL, but some customers may feel more secure with seeing a padlock on the browser, at least in the checkout.

Other thoughts are that Google may eventually rank sites with SSL across the whole site higher - remember 301 redirects in htaccess if you go that route.

From a payment process perspective if you are using a PSP (which you should be) then there is no data security issue, so SSL is not actually required.

Third man is very useful if you want peace of mind against fraud. It can provide you with some good information to base your decision on supplying goods or not.

[newshopbloke]

Thanks Duncan,

Is it easy to have a padlock on just the checkout ? Are you talking ssl or just an image of a padlock ?

Third man I may well do.

Thanks,

Michael

[Duncan Rounding]

Thanks Duncan,

Is it easy to have a padlock on just the checkout ? Are you talking ssl or just an image of a padlock ?

Third man I may well do.

Thanks,

Michael

SSL on the checkout.

[jont]

Google recently announced it will be adding extra weight to sites that are fully on SSL and not just on the checkout so may be worth considering when things settle down and if it takes hold

[newshopbloke]

Hi all,

Thanks for that

Im going with a host that applies ssl to every page.

Is there a thread on the forums that describes fully how to - "remember 301 redirects in htaccess if you go that route"

I don't want to lose any links as my site is only just starting to gain new customers from search engines.

Thanks

Michael

[newshopbloke]

Can a moderator please change the title of this thread to:

SSL HTTPS htaccess redirect help

Ive found various threads but no laymans guide.

Thankyou,

Michael

[newshopbloke]

Hi all,

Just found this, I had a feeling it would mention apache.

https://support.google.com/webmaster...er/93633?hl=en

Just hope it doesn't take me days to understand.

[newshopbloke]

How much have I got this wrong ?

Open notepad, create blank .htaccess file, paste this, ftp to root:

RewriteCond %{HTTPS} off
# First rewrite to HTTPS:
RewriteRule ^(.*)$ https://www.stageprint.co.uk{HTTP_www.stageprint.co.uk}{REQUEST_URI} [L,R=301]
RewriteCond %{HTTP_www.stageprint.co.uk} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_www.stageprint.co.uk}{REQUEST_URI} [L,R=301]

I know its wrong, ive been searching the forums and web for hours on this, really need a laymans guide this is too heavy for me.

Michael

[newshopbloke]

Think ive got it,

open wordpad, paste this lot:

RewriteEngine on
RewriteCond %{HTTP_HOST} ^stageprint\.co.uk$ [OR]
RewriteCond %{HTTP_HOST} ^www\.stageprint\.co.uk$
RewriteRule ^(.*)$ "https\:\/\/stageprint\.co.uk\/$1" [R=301,L]

save as .htaccess

ftp to root

I am correct and its google friendly ?

Michael