Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

SSL, what is "allowed?

Posted on 2011-03-10
2
Medium Priority
?
228 Views
Last Modified: 2012-05-11
So,

I have a main domain, ex. domain.com
And a subdomain, ex. secure.domain.com

I plan to add SSL to secure.domain.com

The frontpage of the subdomain will use the same layout and styling as the main domain (domain.com) and I would like to use the same css files as the main domain. The rest of the subdomain will use a seperate/new layout, so thats no problem.

The problem is, someone told me that all files in include (images, css, files outside public_html etc... everything), needs to be placed within the subdomain (for SSL). Is this true? Do I have to copy all my css, images and other files from my main domain to my subdomain?
0
Comment
Question by:kgp43
2 Comments
 
LVL 19

Expert Comment

by:Michael701
ID: 35101776
What I've done in the past is to place the secure scripts (php) in a folder under the host root. So the url would be https://www.mysite.com/secure/login.php. You can then make sure that when a script is run it's under the HTTPS:// url

This way the entire site can be viewed under the ssl.

This gets away from the warning messages when accessing files outside of the SSL domain.
0
 
LVL 30

Accepted Solution

by:
Brad Howe earned 2000 total points
ID: 35101815
Hi,

CSS, Images and other files should use a relative path in the first place like ..\file.gif or ..\..\image.png. With that said, Anything that is posted in a browser under https (is secure and encrypted).

Now, the domain you want to secure is secure.domain.com. Assuming you are creating a brand new virtual host setup in your httpd.conf and simply creating virtual paths to your css/images, it will be secure.

Remember it is the site that is secure and everything under it. If the virtual host is only listening on port 443, then everything under it - not matter where the content is stored, is secure and served under SSL.

Cheers,
Hades666
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

3 proven steps to speed up Magento powered sites. The article focus is on optimizing time to first byte (TTFB), full page caching and configuring server for optimal performance.
It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…
Suggested Courses

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question