tomccabe Posted April 21, 2010 Share Posted April 21, 2010 I'm working through SSL stuff for the first time. I just want to know if I should secure my entire CMS or simply the login page? The only thing really happening in the CMS is adding/editing products for a store. Actually, there's the ability to view/print orders, but not edit the info. I know on the client side that I'll be securing my login/register/checkout pages, but I'm a little confused on how much of the backend needs SSL. Quote Link to comment https://forums.phpfreaks.com/topic/199322-securing-my-cms/ Share on other sites More sharing options...
AdRock Posted April 21, 2010 Share Posted April 21, 2010 Are you not using sessions? You could use secure sessions Quote Link to comment https://forums.phpfreaks.com/topic/199322-securing-my-cms/#findComment-1046124 Share on other sites More sharing options...
tomccabe Posted April 21, 2010 Author Share Posted April 21, 2010 I'm using sessions, yes. Security is a pretty new and confusing topic for me. I register a session variable when someone logs in and each page checks to see if that variable is set. Quote Link to comment https://forums.phpfreaks.com/topic/199322-securing-my-cms/#findComment-1046136 Share on other sites More sharing options...
tomccabe Posted April 21, 2010 Author Share Posted April 21, 2010 Should I be doing more than this? Quote Link to comment https://forums.phpfreaks.com/topic/199322-securing-my-cms/#findComment-1046157 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.