Hi all,

I am a newbie to SSL and am trying to learn everything I can about it, i would like to use a secure URL https:// on my XOOPS site but only on the registration and once a user is logged in, and also the admin area, basically it is because it will be for a community who I know for a fact are very good at hacking/cracking and I do not want to leave the site vulnerable to this. Or is the new XOOPS really so secure they would have no chance?

Please, I am a newbie to site security and would like to learn more about what I can do to stop hackers.

Thanks in advance.
~seolio~

How are you seolio, yeah I have set up a few SSL domains on XOOPS have a look at this one https://www.paythem.biz/ this is my payment gateway, I put together to bill my website from. Your welcome to sign up to intabill.com

Merchant Signup Page: https://join.intagate.com/join.php?type=merchant&mid=43f48496-85f2-102a-ba7a-00188b306089

Reseller Signup Page: https://join.intagate.com/join.php?type=reseller&mid=43f48496-85f2-102a-ba7a-00188b306089

and I can change the merchant ID you are billing from and you will get the cash..

Anyway more on SSL; basically there is only a few changes you need to make to ensure secure SSL, the XOOPS_URL define in main.php needs to change, ie:

define('XOOPS_URL', 'http://www.paythem.biz');

to

define('XOOPS_URL', 'https://www.paythem.biz');

And there is a couple of changes you need to make to the theme as well, some themes use the xoAppURL and xoImgURL smarty functions, these do not support the URL https:// they will always resolve to http:// which means you will have to modify the theme, do use <{$xoops_url}> and the theme name variable which is this extension in smarty tags:

<{assign var=theme_name value=$xoTheme->folderName}>

this will give you the variable <{$theme_name}> for the folder name of the theme.

Have fun!!