RE: Admin security via HTTPS is very buggy (i.e., not secure)

This message was sent from: Suggestions and Proposals
http://forums.oscommerce.com/viewtopic.php?p=228494#228494
----------------------------------------------------------------

[quote="mergedplot"]Has anyone figured out an answer to this??

Thanks,
Matt[/quote]

There is a kludge that gives you ssl.  In your configure.php file, change the HTTP_SERVER define from http to https.

e.g., define('HTTP_SERVER', 'https://www.myserver.com/');

But be careful, if you download (or upload) your configure.php file without SSH or SFTP you don't know who you'll be sharing the password to your DB with.