Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Contributor jelo on the Authentication category

SSLencrypted Adminlogin without enforcing SSLencrypted access to the surveys  
Written by jelo the 26 Apr 10 at 15:16. Related project: 1.x all. New

The setting of $rooturl = "http://$_SERVER['HTTP_HOST'] only allows you to set https or http . No casewise SSLencryption.

Often installations are using selfsigned certs which will produce cryptic messages beside adding load when just delivering surveys to respondents.

A workaround is leaving the $rooturl empty. But that is causing problems with e.g. links in emails incorrect.

To use rewrite url routine of the webserver is another.

0
votes
up equal down
Solution #1: Offer a separate admin url in the config.php
Written by jelo the 26 Apr 10 at 15:16.

With the separate admin url setting the SSL can be enforced when loggin in without causing any problems on the frontend side.

Add a comment or propose a solution >>