By sampeckham on

I'm new to running a server, so please forgive my ignorance!

I'm running Drupal 6.3 and I would like to have some areas of my site secure. I've found the dev version of Secure Pages which I'm happy to use, as it's going to be a development site for a while yet.

But what I'm not sure about is how it works with SSL and HTTPS/HTTP.

I have my site running on a server that uses CentOS, Apache and Plesk. So i have two folders httpdocs and httpsdocs. My site is in httpdocs, should my whole site also be duplicated in httpsdocs?

In Plesk there is a check box that states: "Use a single directory for housing SSL and non-SSL content" is this what i want to do? As I've already set up my site, ticking it now, doesn't appear to do anything as both folders remain and nothing is added to the httpsdocs folder.

Any help on where I go with this would be great.

⋅ Categories: Drupal 6.x

Comments

sampeckham’s picture

sampeckham commented

Does anyone at least have a site they can point towards?

durum’s picture

durum commented

Any solutions so far?

sampeckham’s picture

sampeckham commented

I did get a solution from my host's forum.

"Check the box to use single SSL directory. This will secure all the files in your httpdocs folder when you enter the secure area of your site."

This seemed to work fine, and used with Secure Pages module I was able to select certain pages to be secure and it would automatically send them through the HTTPS protocol. From what I found ticking the box allowed you to run the whole site under HTTPS. Nothing really appears in the httpsdocs folder though, so just ignore that. But adding the Drupal module gives you fine grained control over which pages are using SSL.

Hope that helps. Turns out I didn't need to have any SSL pages (we went third party with some payment options).

S